Microsoft Azure

Log Analytics workspace

Definition

A container where Azure Monitor stores log and metric data collected from resources, agents, and applications. It can be queried with Kusto Query Language (KQL) and underlies Application Insights, Sentinel, and Container Insights.

Exam context

On AZ-305 you design the workspace strategy: centralized (one for the whole organization, simpler to govern) vs. decentralized (one per team/subscription, more granular access control). This affects RBAC design and data retention.

Studying for the AZ-305?

Log Analytics workspace is a concept that can show up on the exam. Check the full guide to see it in context.