Search code examples
azureazure-databricksazure-log-analyticsazure-monitoring

Import saved KQL queries from ARM template to Azure Log Analytics


I've been setting up monitoring Azure Databricks in an Azure Log Analytics Workspace and managed to get logs going to an existing log analytics workspace I have.

However, I failed to notice that an ARM template was supplied for setting up a new workspace that contains a bunch of useful KQL saved queries.

I would like those saved queries in the log analytics instance I've started out with already, is there a way I can import them?

I've noticed there is an API for creating or updating saved queries, however, this seems to only create / update individual queries and I would prefer to import all the queries mentioned in the above link in one go. Is this possible?


Solution

  • No, there is no such feature for importing them.

    You should create these saved queries by yourself, by using azure portal, or Saved Searches - Create Or Update rest api, or azure cli commands: az monitor log-analytics workspace saved-search create etc.