{"id":9586,"date":"2019-03-28T15:40:52","date_gmt":"2019-03-28T15:40:52","guid":{"rendered":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/?p=9586"},"modified":"2019-10-07T09:27:58","modified_gmt":"2019-10-07T08:27:58","slug":"azure-log-analytics-looking-at-data-and-costs","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/","title":{"rendered":"Azure Log Analytics: Looking at data and costs"},"content":{"rendered":"<p>At some stage, you either need to add a new set of data to Log Analytics or even look at your usage and costs.\u00a0Originally you looked at the <strong>Usage<\/strong> table for this data:<\/p>\n<ul>\n<li><a title=\"https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/log-standard-properties\" href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/log-standard-properties\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/log-standard-properties<\/a><\/li>\n<li><a style=\"background-color: #ffffff;font-size: 1.4rem\" title=\"https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/manage-cost-storage\" href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/manage-cost-storage\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/manage-cost-storage<\/a><\/li>\n<\/ul>\n<p>As you can see from these docs (and please read them as I wont go over the content here), <strong>Usage<\/strong> and some of the queries have moved to a new method using <strong>Union<\/strong>.<\/p>\n<h2>Here are a few of my own that use this new technique<\/h2>\n<p>In this first example I take the sum of all bytes sent to all solutions. I have commented out the <strong>_IsBillable<\/strong> line as I wanted to show both data types.<\/p>\n<p>A customer this week asked which solutions were free, this shows you that detail (after you have collected some data of course).\u00a0However if you don&#8217;t have the data, you can check within the <a href=\"https:\/\/portal.loganalytics.io\/demo#\/\" target=\"_blank\" rel=\"noopener noreferrer\">public Demo Log Analytics workspace<\/a>.<\/p>\n<p><strong>TIP<\/strong>: <em>This can be a good place to check, if the solution is chargeable before you add it to your own!\u00a0 or use this to gauge the likely data quantity. Also see Christoph Petersen&#8217;s blog on <a href=\"https:\/\/blog.peterschen.de\/data-volume-estimation-for-log-analytics\/\" target=\"_blank\" rel=\"noopener noreferrer\">Data volume estimation for Log Analytics<\/a>.\u00a0<\/em><\/p>\n<p>&nbsp;<\/p>\n<pre>\/\/MBytes sent to Log Analytics by ALL solutions\/Tables\r\nunion withsource = tt *\r\n\/\/| where _IsBillable == true\r\n| summarize MBytes=round(sum(_BilledSize\/1024\/1024),2)\u00a0 by\u00a0 Solution=tt\u00a0 , _IsBillable\r\n| sort by MBytes nulls last<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9601 size-full\" src=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb11.png\" alt=\"A table showing MBytes sent to Log Analytics by all solutions.\" width=\"855\" height=\"497\" srcset=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb11.png 855w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb11-300x174.png 300w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb11-768x446.png 768w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb11-330x192.png 330w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb11-800x465.png 800w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb11-400x233.png 400w\" sizes=\"(max-width: 855px) 100vw, 855px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>You could then use this list to identify just one solution to drill into:<\/p>\n<pre>let SolutionName= \"AzureDiagnostics\";\r\nunion withsource = tt *\r\n| where TimeGenerated &gt; ago(1d)\r\n| where _IsBillable == true\r\n| where tt == SolutionName\r\n| summarize MBytes=round(sum(_BilledSize\/1024\/1024),2) by Solution=tt , _IsBillable\r\n| sort by MBytes nulls last<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9619 size-full\" src=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb12.png\" alt=\"A table showing that AzureDiagnostics is being drilled into, using the code from before.\" width=\"855\" height=\"252\" srcset=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb12.png 855w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb12-300x88.png 300w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb12-768x226.png 768w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb12-330x97.png 330w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb12-800x236.png 800w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image_thumb12-400x118.png 400w\" sizes=\"(max-width: 855px) 100vw, 855px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>This last example builds on the last query, and looks at just the <strong>NetworkSecurityGroup<\/strong> (NSG) resources.<\/p>\n<pre>union withsource = tt *\r\n| where TimeGenerated &gt; ago(1d)\r\n| where _IsBillable == true\r\n| where tt == \"AzureDiagnostics\" and ResourceType==\"NETWORKSECURITYGROUPS\"\r\n| summarize MBytes=round(sum(_BilledSize\/1024\/1024),2) by Solution=tt , _IsBillable ,Resource\r\n| sort by MBytes nulls last<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9988 size-large\" src=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image15-1024x373.png\" alt=\"A table that looks at NetworkSecurityGroup (NSG) resources, using the prior code example.\" width=\"1024\" height=\"373\" srcset=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image15.png 1024w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image15-300x109.png 300w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image15-768x280.png 768w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image15-330x120.png 330w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image15-800x291.png 800w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/image15-400x146.png 400w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Updated query from post <a href=\"https:\/\/blog.peterschen.de\/data-volume-estimation-for-log-analytics\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/blog.peterschen.de\/data-volume-estimation-for-log-analytics\/\u00a0<\/a><\/p>\n<p>Example 1: This just shows you the data when its a <strong>billable<\/strong> equals <strong>True<\/strong> metric (see line 4).<\/p>\n<pre>let daystoSearch = 1d;\r\nunion withsource = tt *\r\n| where TimeGenerated &gt; ago(daystoSearch)\r\n| where _IsBillable == True\r\n| summarize\r\n    RecordCount=count(),\r\n    MbperRecord = round(sum(_BilledSize \/ 1024 \/ 1024) \/ count(), 4) ,\r\n    TotalMBytes= round(sum(_BilledSize\/1024\/1024),4)\r\n    by SolutionName = tt\r\n| sort by SolutionName asc\r\n    or, in example 2 we look at all data and show the _IsBillable status in a column\r\n    let daystoSearch = 1d;\r\n    union withsource = tt *\r\n| where TimeGenerated &gt; ago(daystoSearch)\r\n| summarize\r\n    RecordCount=count(),\r\n    MbperRecord = round(sum(_BilledSize \/ 1024 \/ 1024) \/ count(), 4) ,\r\n    TotalMBytes= round(sum(_BilledSize\/1024\/1024),4)\r\n    by SolutionName = tt, _IsBillable\r\n| sort by SolutionName asc<\/pre>\n<p>&nbsp;<\/p>\n<p>Example 2: We look at all data and show the <strong>_IsBillable<\/strong> status in a column.<\/p>\n<pre>let daystoSearch = 1d;\r\nunion withsource = tt *\r\n| where TimeGenerated &gt; ago(daystoSearch)\r\n| summarize    \r\n    RecordCount=count(),\r\n    MbperRecord = round(sum(_BilledSize \/ 1024 \/ 1024) \/ count(), 4) ,\r\n    TotalMBytes= round(sum(_BilledSize\/1024\/1024),4) \r\n    by SolutionName = tt, _IsBillable\r\n| sort by SolutionName asc<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9973 size-full\" src=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/isbill.jpg\" alt=\"Adding _IsBillable to the table, using the prior code example.\" width=\"775\" height=\"268\" srcset=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/isbill.jpg 775w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/isbill-300x104.jpg 300w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/isbill-768x266.jpg 768w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/isbill-330x114.jpg 330w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/isbill-400x138.jpg 400w\" sizes=\"(max-width: 775px) 100vw, 775px\" \/><\/p>\n<h2>Updated<\/h2>\n<p>Sometimes it&#8217;s also useful (thanks Jason Hall) to see the Azure services and resources that are emitting the data. If you only want to look at one solution, please edit line 5.<\/p>\n<pre>\/\/ Data Usage + identify the resources emitting data\r\nlet daystoSearch = 1d;\r\nunion withsource = tt *\r\n| where TimeGenerated &gt; ago(daystoSearch)\r\n\/\/| where tt == \u201cAzureDiagnostics\u201d \/\/ look for a specifc solution?\r\n| summarize\r\n    RecordCount=count(),\r\n    MbperRecord = round(count() \/ sum(_BilledSize\/1024\/1024),2) ,\r\n    TotalMBytes= round(sum(_BilledSize\/1024\/1024),2)\r\n    by SolutionName = tt,\r\n_IsBillable, \/\/ is this billable data?\r\nResourceProvider, \/\/ what Azure Service\r\nResource \/\/ what entity in that service\r\n| sort by SolutionName asc, TotalMBytes<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9976 size-full\" src=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/serv.jpg\" alt=\"A table showing the resources that are emitting data.\" width=\"813\" height=\"96\" srcset=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/serv.jpg 813w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/serv-300x35.jpg 300w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/serv-768x91.jpg 768w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/serv-330x39.jpg 330w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/serv-800x94.jpg 800w, https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/03\/serv-400x47.jpg 400w\" sizes=\"(max-width: 813px) 100vw, 813px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>You can also add ResourceGroup (for AzureDiagnostics):<\/p>\n<pre>\/\/ Data Usage + identify the resources emitting data\r\nlet daystoSearch = 1d;\r\nunion withsource = tt *\r\n| where TimeGenerated &gt; ago(daystoSearch)\r\n| where tt == \u201cAzureDiagnostics\u201d \/\/ look for a specifc solution?\r\n| summarize\r\nRecordCount=count(),\r\nMbperRecord = round(count() \/ sum(_BilledSize\/1024\/1024),2) ,\r\nTotalMBytes= round(sum(_BilledSize\/1024\/1024),2)\r\nby SolutionName = tt,\r\n_IsBillable, \/\/ is this billable data?\r\nResourceProvider, \/\/ what Azure Service\r\nResource , \/\/ what entity in that service\r\nResourceGroup\r\n| sort by SolutionName asc, TotalMBytes<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>At some stage, you either need to add a new set of data to Log Analytics or even look at your usage and costs.\u00a0Originally you looked at the Usage table for this data: https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/log-standard-properties https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/manage-cost-storage As you can see from these docs (and please read them as I wont go over the content here), Usage<\/p>\n","protected":false},"author":424,"featured_media":17604,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"categories":[1],"post_tag":[128,160,424],"content-type":[],"coauthors":[421],"class_list":["post-9586","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cross-industry","tag-azure","tag-blogger-series","tag-hybridcloud"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Azure Log Analytics: Looking at data and costs - Microsoft Industry Blogs - United Kingdom<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Azure Log Analytics: Looking at data and costs - Microsoft Industry Blogs - United Kingdom\" \/>\n<meta property=\"og:description\" content=\"At some stage, you either need to add a new set of data to Log Analytics or even look at your usage and costs.\u00a0Originally you looked at the Usage table for this data: https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/log-standard-properties https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/manage-cost-storage As you can see from these docs (and please read them as I wont go over the content here), Usage\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Industry Blogs - United Kingdom\" \/>\n<meta property=\"article:published_time\" content=\"2019-03-28T15:40:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-10-07T08:27:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"450\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Azure Log Analytics: Looking at data and costs\",\"datePublished\":\"2019-03-28T15:40:52+00:00\",\"dateModified\":\"2019-10-07T08:27:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/\"},\"wordCount\":333,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg\",\"keywords\":[\"Azure\",\"Blogger Series\",\"Hybrid Cloud\"],\"articleSection\":[\"Cross-industry\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/\",\"url\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/\",\"name\":\"Azure Log Analytics: Looking at data and costs - Microsoft Industry Blogs - United Kingdom\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg\",\"datePublished\":\"2019-03-28T15:40:52+00:00\",\"dateModified\":\"2019-10-07T08:27:58+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg\",\"width\":800,\"height\":450,\"caption\":\"a close up of a logo\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Azure Log Analytics: Looking at data and costs\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/\",\"name\":\"Microsoft Industry Blogs - United Kingdom\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#organization\",\"name\":\"Microsoft Industry Blogs - United Kingdom\",\"url\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/08\/Microsoft-Logo.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/08\/Microsoft-Logo.png\",\"width\":259,\"height\":194,\"caption\":\"Microsoft Industry Blogs - United Kingdom\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Azure Log Analytics: Looking at data and costs - Microsoft Industry Blogs - United Kingdom","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/","og_locale":"en_US","og_type":"article","og_title":"Azure Log Analytics: Looking at data and costs - Microsoft Industry Blogs - United Kingdom","og_description":"At some stage, you either need to add a new set of data to Log Analytics or even look at your usage and costs.\u00a0Originally you looked at the Usage table for this data: https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/log-standard-properties https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/manage-cost-storage As you can see from these docs (and please read them as I wont go over the content here), Usage","og_url":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/","og_site_name":"Microsoft Industry Blogs - United Kingdom","article_published_time":"2019-03-28T15:40:52+00:00","article_modified_time":"2019-10-07T08:27:58+00:00","og_image":[{"width":800,"height":450,"url":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/"},"author":{"name":"","@id":""},"headline":"Azure Log Analytics: Looking at data and costs","datePublished":"2019-03-28T15:40:52+00:00","dateModified":"2019-10-07T08:27:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/"},"wordCount":333,"commentCount":0,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg","keywords":["Azure","Blogger Series","Hybrid Cloud"],"articleSection":["Cross-industry"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/","url":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/","name":"Azure Log Analytics: Looking at data and costs - Microsoft Industry Blogs - United Kingdom","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg","datePublished":"2019-03-28T15:40:52+00:00","dateModified":"2019-10-07T08:27:58+00:00","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg","contentUrl":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2017\/07\/UK-Hybrid-Cloud-Team-Grey.jpg","width":800,"height":450,"caption":"a close up of a logo"},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2019\/03\/28\/azure-log-analytics-looking-at-data-and-costs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/"},{"@type":"ListItem","position":2,"name":"Azure Log Analytics: Looking at data and costs"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/","name":"Microsoft Industry Blogs - United Kingdom","description":"","publisher":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#organization","name":"Microsoft Industry Blogs - United Kingdom","url":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/08\/Microsoft-Logo.png","contentUrl":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-content\/uploads\/sites\/22\/2019\/08\/Microsoft-Logo.png","width":259,"height":194,"caption":"Microsoft Industry Blogs - United Kingdom"},"image":{"@id":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/posts\/9586"}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/users\/424"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/comments?post=9586"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/posts\/9586\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/media\/17604"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/media?parent=9586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/categories?post=9586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/post_tag?post=9586"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/content-type?post=9586"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/wp-json\/wp\/v2\/coauthors?post=9586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}