Migrating historical log data from one log analytics workspace to another

VJ-8370 651 Reputation points
2021-08-17T10:39:37.64+00:00

Hi,

Can someone suggest if there is a way to migrate historical log data from one log analytics workspace to another.

Source log analytics workspace is in Subscription A with an AD tenant B. Target log analytics workspace is in Subscription C with an AD tenant D.

Basically got this scenario while migrating resources from one azure subscription to another. (Resource in subscription A has to fit to the target design in subscription C)

Regards,
VJ

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
0 comments No comments
{count} votes

Accepted answer
  1. Monalla-MSFT 13,146 Reputation points Moderator
    2021-08-25T02:21:26.777+00:00

    @VJ-8370 - Thanks for reaching out.

    • Azure does not support any sort of log analytics migration, even from the backend, such requests are strictly not entertained. However there could be very messy ways to try and get the data over but I'm not sure if it would be worth the effort.
      Export the logs from workspace A, to a storage account (or excel), get the data physically downloaded to a machine, from there, either create a custom PowerShell script that would collect the logs, reconstruct them and send them over to the new workspace through the OpInsights REST API. By constructing the logs you're able to also keep the timestamp, although time generated in workspace will still mess things up. However you can still use the reconstructed (e.g. backdated) timestamp and query
      the workspace using timestamp and get data in the right order.

    Or

    • You'd have to do something custom like create a Logic App to read data from the workspace and write to the new one.

    Hope this helps.

    If the above response helped, Please feel free to "Accept as Answer" so it can be benificial to the community.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.