Sending Diagnostic Settings to the same workspace

rankeny 20 Reputation points
2024-06-28T03:22:49.2333333+00:00

I have a Log Analytics workspace that I send all of diagnostic settings to for auditing purposes. The Log Analytics workspace itself has its own set of Diagnostic Settings. I am trying to keep a single workspace for the time being. Is there any issues with sending the Diagnostic Settings to itself?

I can imagine there may be a recursive issue if the audit logs contain audits of write events. It is hard to figure out what any Diagnostic Setting for any given resource is. Pointers towards where those are described would also be appreciated.

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,960 questions
0 comments
Accepted answer
  1. Deepanshukatara-6769 6,795 Reputation points
    2024-06-28T05:51:26.5666667+00:00

    Hi , Welcome to MS Q&A

    It is not recommended to send Diagnostic Settings to the same Log Analytics workspace that your Application Insights resource is based on due to potential duplicate telemetry. This can lead to recursive issues if the audit logs contain audits of write events.

    For more details, you can refer to the Diagnostic settings in Azure Monitor - Requirements and limitations.

    By following these guidelines, you can avoid potential issues with duplicate telemetry and ensure accurate monitoring and auditing.

    Kindly accept answer if it helps, please let us know if any further questions

    Thanks
    Deepanshu

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest