![]() ![]() Get the retention and archive policy by table for a Log Analytics workspace Microsoft.OperationalInsights/workspaces/write and microsoft.operationalinsights/workspaces/tables/write permissions to the Log Analytics workspace, as provided by the Log Analytics Contributor built-in role, for example Permissions required ActionĬonfigure data retention and archive policies for a Log Analytics workspace ![]() Log Analytics immediately archives any data that's older than 90 days and none of the data is deleted. You decide to change the retention setting to 90 days of interactive retention without changing the total retention period of 180 days. For example, you might have an existing table with 180 days of interactive retention and no archive period. ![]() If you change the archive settings on a table with existing data, the relevant data in the table is also affected immediately. When you increase the retention setting, the new retention period applies to all data that's already been ingested into the table and hasn't yet been purged or removed. You can purge data immediately when required. When you shorten an existing retention setting, Azure Monitor waits 30 days before removing the data, so you can revert the change and avoid data loss in the event of an error in configuration. Adjustments to retention and archive settings The archive period can only be set at the table level, not at the workspace level. You can access archived data by running a search job or restoring archived logs. When you set a total retention period that's longer than the interactive retention period, Log Analytics automatically archives the relevant data immediately at the end of the retention period. When you no longer use the logs, but still need to keep the data for compliance or occasional investigation, archive the logs to save costs.Īrchived data stays in the same table, alongside the data that's available for interactive queries. You can configure a different retention setting on individual tables.ĭuring the interactive retention period, data is available for monitoring, troubleshooting, and analytics. How retention and archiving workĮach workspace has a default retention setting that's applied to all tables. This article describes how to configure data retention and archiving. In the coming months, it will be possible to extend archive to 12 years. You can currently keep data in archived state for up to 7 years. You can access data in the archived state by using search jobs and restore. Archive: Lets you keep older, less used data in your workspace at a reduced cost.Interactive retention: Lets you retain Analytics logs for interactive queries of up to 2 years.Azure Monitor Logs retains data in two states: ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |