Is it possible to push data from ADX/ADF back to LA?

Dhanya Ragini 1

We are using ADX solution as part of sentinel for long term retention and would like to know if we can retrieve the data from ADX/ADF back to log analytics when needed.

PRADEEPCHEEKATLA-MSFT 84,381 Reputation points Microsoft Employee

2021-06-14T09:49:10.23+00:00

Hello @Dhanya Ragini ,

Just checking in to see if the below answer provided by @Leon Laude helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

1 answer

Leon Laude 85,716 Reputation points

2021-06-11T08:02:50.163+00:00

Hi @Dhanya Ragini ,

As far as I know it is possible to connect Azure Data Explorer (ADX) / Azure Data Factory (ADF) to Log Analytics (LA), please check the documentations below for more information:

Query data in Azure Monitor using Azure Data Explorer (Preview)
https://video2.skills-academy.com/en-us/azure/data-explorer/query-monitor-data

Monitor and Alert Data Factory by using Azure Monitor
https://video2.skills-academy.com/en-us/azure/data-factory/monitor-using-azure-monitor

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Best regards,
Leon
Please sign in to rate this answer.
Dhanya Ragini 1 Reputation point

2021-06-14T22:45:39.107+00:00

Hi Leon,

Thanks for your response.

My scenario is we have hot data in log analytic workspace for 90 days and then it is being pushed to ADX for 1 year(cold storage).The requirement is we need to push the data from ADX to log analytic workspace where it becomes the hot data and then query them.

PRADEEPCHEEKATLA-MSFT 84,381 Reputation points Microsoft Employee

2021-06-18T11:45:43.977+00:00

Hi @Dhanya Ragini ,

We are reaching out to internal team to get help on this issue and will update you as soon as we have a response.

Thank you for your patience.

PRADEEPCHEEKATLA-MSFT 84,381 Reputation points Microsoft Employee

2021-06-24T07:01:17.17+00:00

Hi @Dhanya Ragini ,

There isn't a built-in mechanism to do the above requirement. LA has REST API capabilities to ingest logs though, so it might be possible through ADF.

Hope this helps.
Sign in to comment

Share via

Is it possible to push data from ADX/ADF back to LA?

1 answer