The data stored in log analytics is encrypted at rest by default. You have an option to encrypt the data at rest using customer managed keys.
Here is a detailed document for your reference: customer-managed-keys
There are 3 types of keys involved in Storage data encryption:
- KEK - Key Encryption Key (your Customer-managed key)
- AEK - Account Encryption Key
- DEK - Data Encryption Key