All logs are not showing in the Log Analytics Workspace - Azure Data Explorer

Question

All logs are not showing in the Log Analytics Workspace - Azure Data Explorer

Souvik Saha Choudhary 21

I created a Log Analytics Workspace connection in Azure Data Explorer.
I tried to query AzureDiagnostics logs for one month.
But it was not showing all the expected logs.

How can I get all logs?

Sander van de Velde | MVP 36,146 Reputation points MVP

2025-03-14T07:58:45.6666667+00:00

Hello @Souvik Saha Choudhary ,

welcome to this moderated Azure community forum.

Better questions with more information lead to better answers from our community members.

Please provide information about the steps you have taken, the guide you follow, and describe the missing data you expect you receive so fellow members can understand your question better.
Venkat Reddy Navari 1,585 Reputation points Microsoft External Staff

2025-03-17T12:46:38+00:00

@Souvik Saha Choudhary We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

1 answer

Your answer

Sander van de Velde | MVP 36,146 Reputation points MVP

2025-03-14T07:58:45.6666667+00:00

Hello @Souvik Saha Choudhary ,

welcome to this moderated Azure community forum.

Better questions with more information lead to better answers from our community members.

Please provide information about the steps you have taken, the guide you follow, and describe the missing data you expect you receive so fellow members can understand your question better.
Venkat Reddy Navari 1,585 Reputation points Microsoft External Staff

2025-03-17T12:46:38+00:00

@Souvik Saha Choudhary We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Answer 1

Hi @Souvik Saha Choudhary
To address missing logs in your Azure Log Analytics Workspace linked to Azure Data Explorer, the following resources will be useful:

Check Diagnostic Settings: Ensure that the diagnostic settings for your Azure resources are configured correctly to send logs to the right Log Analytics Workspace. Verify that the necessary log categories are selected for collection.
Verify Workspace Setup: Double-check that your Log Analytics Workspace is set up in the correct subscription and region. Any issues here might prevent logs from being ingested.
Check Log Types and Retention: Confirm that the correct types of logs are being sent to your Log Analytics Workspace. Also, ensure that the retention settings are properly configured so that logs are not prematurely deleted before you can query them.
Be Aware of Column Limits: The AzureDiagnostics table has a limit of 500 columns. If this limit is exceeded, some logs might not be captured. Review your columns to ensure you are not hitting this limit.
Use KQL to Search Logs: Utilize Kusto Query Language (KQL) to effectively query logs. For example, you can use the query AzureDiagnostics | where TimeGenerated > ago(30d) to find logs from the last month. To explore all available tables, use union * | summarize count() by $table.
Check Permissions: Make sure you have the necessary permissions to view all logs. This is especially important if your resources and workspace are in different subscriptions.
Monitor Ingestion Delays: Check the Usage tab in Log Analytics Workspace Insights to monitor data ingestion and identify any delays. Delays in log ingestion can affect the availability of logs.

For more information refer to Microsoft's documentation:

I hope this helps. Please let us know if you have any further questions.

Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.

Share via

All logs are not showing in the Log Analytics Workspace - Azure Data Explorer

1 answer

Your answer