Azure log analytics and Azure AD Sign-in logs

SANNAMATH, Russell 1

Hi
I have imported Azure AD Sign-in logs to LogAnalytics workspace.
I like to create a web portal where user input some data like user name, Date and time. Based on the user data the web portal should retrieve data from Azure Log Analytics and present it in table format on the web portal.
Any suggestions how can I achieve this?
I can run queries on Azur LogAnalytics to retrieve the data but I like to do the same from a web portal.

bharathn-msft 5,086 Reputation points Microsoft Employee

2020-08-11T04:36:54.02+00:00

@SANNAMATH, Russell Thank you for reaching out. To pull data from Azure Log Analytics with in your web portal you might have to write custom code to invoke the Log Analytics REST API and get the result set and display it with in your web portal. For testing the REST API GET Call and generating the URL, you can always use Azure Log Analytics API Explorer.

Hope this information helps, please review the above information and circle back if you have any further queries.
SANNAMATH, Russell 1 Reputation point

2020-08-11T04:47:22.437+00:00

@bharathn-msft Thank you for your reply.
Can I do the similar thing with Power BI? Please share if you have any referral link.
With the REST API, would I be able to pass user input variable to log analytics query? Please share if you have any referral link.
bharathn-msft 5,086 Reputation points Microsoft Employee

2020-08-11T06:57:38.51+00:00
@SANNAMATH, Russell Thank you for circling back. Currently you can import Log Analytics logs in to PowerBI , if that's not fitting your requirement. Please revert back with more info on your powerBI requirement ? so that we can assist you accordingly.

Regarding the REST API query, when creating the KQL query itself you can incorporate the user input variable and create the URL , below is the sample URL for GET call to Log Analytics API.

GET https://api.loganalytics.io/v1/workspaces/{workspace-id}/query?query=AzureActivity%20|%20summarize%20count()%20by%20Category Authorization: Bearer <access token>

Use Azure Log Analytics API Explorer for testing

Hope this information helps, please revert back for further queries. Thank you
bharathn-msft 5,086 Reputation points Microsoft Employee

2020-08-12T01:49:12.81+00:00

@SANNAMATH, Russell Requesting to review the above information and circle back if you have any further queries. Thank you
bharathn-msft 5,086 Reputation points Microsoft Employee

2020-08-13T07:07:35.263+00:00

@SANNAMATH, Russell - Please review the above information and get back if you have any further queries. Thank you
Clive Watson 5,876 Reputation points MVP

2020-09-02T12:13:00.803+00:00

You could also use a Workbook to display the data (within the Azure Portal)? https://learn.microsoft.com/en-us/azure/azure-monitor/platform/workbooks-overview

1 answer

bharathn-msft 5,086 Reputation points Microsoft Employee

2020-08-15T05:11:15.6+00:00

@SANNAMATH, Russell - To pull data from Azure Log Analytics with in your web portal you might have to write custom code to invoke the Log Analytics REST API and get the result set and display it with in your web portal. For testing the REST API GET Call and generating the URL, you can always use Azure Log Analytics API Explorer.

Please review the above information and circle back if you have any further queries. Thank you
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Share via

Azure log analytics and Azure AD Sign-in logs

1 answer