Skip to content

Latest commit

 

History

History
128 lines (107 loc) · 6.41 KB

quick-create-workspace-posh.md

File metadata and controls

128 lines (107 loc) · 6.41 KB
title description services documentationcenter author manager editor ms.assetid ms.service ms.workload ms.tgt_pltfrm ms.topic ms.date ms.author ms.component
Create a Log Analytics workspace using Azure PowerShell| Microsoft Docs
Learn how to create a Log Analytics workspace to enable management solutions and data collection from your cloud and on-premises environments with Azure PowerShell.
log-analytics
log-analytics
mgoedtel
carmonm
log-analytics
na
na
conceptual
09/18/2018
magoedte

Create a Log Analytics workspace with Azure PowerShell

The Azure PowerShell module is used to create and manage Azure resources from the PowerShell command line or in scripts. This quickstart shows you how to use the Azure PowerShell module to deploy a Log Analytics workspace in Azure, which is a unique environment with its own data repository, data sources, and solutions. The steps described in this article are required if you intend on collecting data from the following sources:

  • Azure resources in your subscription
  • On-premises computers monitored by System Center Operations Manager
  • Device collections from System Center Configuration Manager
  • Diagnostic or log data from Azure storage

For other sources, such as Azure VMs and Windows or Linux VMs in your environment, see the following topics:

If you don't have an Azure subscription, create a free account before you begin.

[!INCLUDE cloud-shell-try-it.md]

If you choose to install and use the PowerShell locally, this tutorial requires the Azure PowerShell module version 5.7.0 or later. Run Get-Module -ListAvailable AzureRM to find the version. If you need to upgrade, see Install Azure PowerShell module. If you are running PowerShell locally, you also need to run Connect-AzureRmAccount to create a connection with Azure.

Create a workspace

Create a worksapce with New-AzureRmResourceGroupDeployment. The following example creates a workspace named TestWorkspace in the resource group Lab in the eastus location using a Resource Manager template from your local machine. The JSON template is configured to only prompt you for the name of the workspace, and specifies a default value for the other parameters that would likely be used as a standard configuration in your environment.

The following parameters set a default value:

  • location - defaults to East US
  • sku - defaults to the new Per-GB pricing tier released in the April 2018 pricing model

Warning

If creating or configuring a Log Analytics workspace in a subscription that has opted into the new April 2018 pricing model, the only valid Log Analytics pricing tier is PerGB2018.

Create and deploy template

  1. Copy and paste the following JSON syntax into your file:

    {
"$schema": "http://schema.management.azure.com/schemas/2014-04-01-preview/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
    "workspaceName": {
        "type": "String",
		"metadata": {
          "description": "Specifies the name of the workspace."
        }
    },
    "location": {
        "type": "String",
		"allowedValues": [
		  "eastus",
		  "westus"
		],
		"defaultValue": "eastus",
		"metadata": {
		  "description": "Specifies the location in which to create the workspace."
		}
    },
    "sku": {
        "type": "String",
		"allowedValues": [
          "Standalone",
          "PerNode",
	      "PerGB2018"
        ],
		"defaultValue": "PerGB2018",
        "metadata": {
        "description": "Specifies the service tier of the workspace: Standalone, PerNode, Per-GB"
	}
      }
},
"resources": [
    {
        "type": "Microsoft.OperationalInsights/workspaces",
        "name": "[parameters('workspaceName')]",
        "apiVersion": "2017-03-15-preview",
        "location": "[parameters('location')]",
        "properties": {
            "sku": {
                "Name": "[parameters('sku')]"
            },
            "features": {
                "searchVersion": 1
            }
        }
      }
   ]
}

  2. Edit the template to meet your requirements. Review Microsoft.OperationalInsights/workspaces template reference to learn what properties and values are supported.

  3. Save this file as deploylaworkspacetemplate.json to a local folder.

  4. You are ready to deploy this template. Use the following commands from the folder containing the template:

        New-AzureRmResourceGroupDeployment -Name <deployment-name> -ResourceGroupName <resource-group-name> -TemplateFile deploylaworkspacetemplate.json

The deployment can take a few minutes to complete. When it finishes, you see a message similar to the following that includes the result:

Example result when deployment is complete

Next steps

Now that you have a workspace available, you can configure collection of monitoring telemetry, run log searches to analyze that data, and add a management solution to provide additional data and analytic insights.