question

VJ-8370 avatar image
0 Votes"
VJ-8370 asked VJ-8370 commented

Migrating historical log data from one log analytics workspace to another

Hi,

Can someone suggest if there is a way to migrate historical log data from one log analytics workspace to another.

Source log analytics workspace is in Subscription A with an AD tenant B. Target log analytics workspace is in Subscription C with an AD tenant D.

Basically got this scenario while migrating resources from one azure subscription to another. (Resource in subscription A has to fit to the target design in subscription C)

Regards,
VJ

azure-monitor
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Monalla-MSFT avatar image
0 Votes"
Monalla-MSFT answered VJ-8370 commented

@VJ-8370 - Thanks for reaching out.

  • Azure does not support any sort of log analytics migration, even from the backend, such requests are strictly not entertained. However there could be very messy ways to try and get the data over but I'm not sure if it would be worth the effort.
    Export the logs from workspace A, to a storage account (or excel), get the data physically downloaded to a machine, from there, either create a custom PowerShell script that would collect the logs, reconstruct them and send them over to the new workspace through the OpInsights REST API. By constructing the logs you're able to also keep the timestamp, although time generated in workspace will still mess things up. However you can still use the reconstructed (e.g. backdated) timestamp and query
    the workspace using timestamp and get data in the right order.

Or

  • You'd have to do something custom like create a Logic App to read data from the workspace and write to the new one.


Hope this helps.

If the above response helped, Please feel free to "Accept as Answer" so it can be benificial to the community.





· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you Monalla for the response. While exporting the data from the Log Analytics Workspace, it just limits the output to only 30K records for a particular query. Is there any way we can increase this and export the data in the workspace in one go?

Regards,
VJ

0 Votes 0 ·