Make it possible to send Storage Analytics ($logs) to Log analytics
Currently Storage accounts can generate detailed logs which are stored under $logs in the storage account. But it is not possible to link this to Log Analytics. This functionality would enable monitoring data access, which is sometimes a regulatory requirement.
Azure Storage logs integration with Azure Monitor is in limited public preview since 5/4/2020. Sending logs to Log Analytics is supported as native option in diagnostic setting. You can read more details in: https://docs.microsoft.com/en-us/azure/storage/common/monitor-storage
You can participate the preview by registering in: https://forms.microsoft.com/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbRxW65f1VQyNCuBHMIMBV8qlUM0E0MFdPRFpOVTRYVklDSE1WUTcyTVAwOC4u
What do you mean by "Sending logs to Log Analytics is supported as native option in diagnostic setting?" There is no current way to do that is there which is the original intent of the feature request, right?
Clement Chen commented
I tested sending logs for blob services to log analytics services and it seems working as expected. Can I set the diag setting using ARM now? This was an issue before (https://github.com/MicrosoftDocs/azure-docs/issues/13195). Not sure whether this can be done with the preview feature.
When this feature is available for preview? As of now we are trying to send logs storage analytics to log analytics using PowerShell script but it doesn't seem to be a accurate information. No user information available in the storage analytics logs and to get this info if we want join this data with AzureActivity log information there is no proper joining fields available. Please update when this feature will be available?
Hi Azure Team,
Do we have any update on selecting Log Analytics from Storage Account's Diagnostic tab. I looked at the solution which is given above - Does it periodically send logs to log analytics or it's moved immediately? what is the best practice in this approach? how to ensure no duplicate logs moved in log analytics.
Arg... this so should have been done already considering the sensitivity of data stored in Storage Accounts.
Omer Zubair commented
Hi Azure team,
Really interested in this. are we on track?
Ivan Ignatiev commented
November already, when Public Preview will start ?
Thank you !
Any kind of update on this would be great :)
Mohammed Farwana commented
a very needed functionality. when this will be solved?
Greg Lloyd commented
Has there been any update on this? We tried to use the following the 'oms-azure-storage-analytics-solution' solution which is in GitHub, link at bottom, however this did not work. Any update would be greatly appreciated.