Configure Azure DDoS Protection Log Analytics workspace

In order to use diagnostic logging, you'll first need a Log Analytics workspace with diagnostic settings enabled.

In this tutorial, you learn how to:

• Configure a Log Analytics workspace for DDoS Protection.

Prerequisites

• If you don't have an Azure subscription, create a free account before you begin.

Create Log Analytics workspace

1. Sign in to the Azure portal.

2. In the search box at the top of the portal, enter Log Analytics workspace. Select Log Analytics workspace in the search results.

3. Select + Create on the navigation bar.

   

4. On the Create Log Analytics workspace page, enter the following information.

   Setting	Value
   Subscription	Select your Azure subscription.
   Resource Group	Select your resource group.
   Name	Enter myLogAnalyticsWorkspace.
   Region	Select East US.

5. Select Review + create and then select Create after validation passes.

6. In the search box at the top of the portal, enter myLogAnalyticsWorkspace. Select myLogAnalyticsWorkspace in the search results.

7. Under Monitoring in the side tab, select Diagnostic settings, then select + Add diagnostic setting.

   

8. On the Diagnostic setting page, under Destination details, select Send to Log Analytics workspace, then enter the following information.

   Setting	Value
   Diagnostic setting name	Enter myDiagnosticSettings.
   Logs	Select allLogs.
   Metrics	Select AllMetrics.
   Destination details	Select Send to Log Analytics workspace.
   Subscription	Select your Azure subscription.
   Log Analytics Workspace	Select myLogAnalyticsWorkspace.

9. Select Save.

For more information, see Log Analytics workspace overview.

Next steps

In this tutorial you learned how to create a Log Analytics workspace for Azure DDoS Protection. To learn how to configure alerts, continue to the next article.

Configure diagnostic logging alerts