azure-loganalytics

import os from azure.identity import DefaultAzureCredential from azure.monitor.query import LogsQueryClient from datetime import timedelta # Set your Log Analytics Workspace ID # Can be found in the Azure portal under your Log Analytics workspace's 'Overview' page LOGS_WORKSPACE_ID = os.environ.get("LOGS_WORKSPACE_ID", "<your_log_analytics_workspace_id>") # Authenticate using DefaultAzureCredential # Ensure environment variables AZURE_CLIENT_ID, AZURE_TENANT_ID, AZURE_CLIENT_SECRET are set, # or you are logged in via 'az login' (Azure CLI) for this to work automatically. credential = DefaultAzureCredential() # Create a LogsQueryClient client = LogsQueryClient(credential) # Define a Kusto Query Language (KQL) query query = """ AzureActivity | summarize count() by ResourceGroup | limit 5 """ try: # Execute the query for data from the last 1 day response = client.query_workspace( LOGS_WORKSPACE_ID, query, timespan=timedelta(days=1) ) # Process and print the results if response.tables: for table in response.tables: print(f"\nTable: {table.name}") print(f"Columns: {[col.name for col in table.columns]}") for row in table.rows: print(row) else: print("No results found for the query.") except Exception as e: print(f"An error occurred: {e}")