Log Analytics workspace

E828324

Azure resource log data store monitoring workspace telemetry data store

Log Analytics workspace is an Azure cloud data store that centralizes, indexes, and queries telemetry and log data collected from various resources for monitoring, analysis, and troubleshooting.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (4)

Label	Occurrences
Azure Log Analytics	4
Azure Application Insights (via export)	1
Log Analytics workspace canonical	1
Microsoft Sentinel workbooks	1

How this entity was disambiguated

This entity first appeared as the object of triple T9899400 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: Log Analytics workspace
Context triple: [Azure Monitor, storesLogsIn, Log Analytics workspace]

A. Azure Monitor
Azure Monitor is a cloud-based observability service that collects, analyzes, and acts on telemetry data from applications and infrastructure running in Azure and other environments.
B. Alibaba Cloud Log Service
Alibaba Cloud Log Service is a fully managed, scalable logging and observability platform for collecting, storing, analyzing, and visualizing log data within the Alibaba Cloud ecosystem.
C. Microsoft Sentinel
Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution on Azure that helps organizations detect, investigate, and respond to threats at scale.
D. Power BI workspaces
Power BI workspaces are collaborative environments in Microsoft Power BI where users organize, manage, and share datasets, reports, and dashboards with specific groups or across an organization.
E. VividCortex
VividCortex is a database performance monitoring and analytics platform designed to help teams optimize and troubleshoot production database workloads in real time.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: Log Analytics workspace
Target entity description: Log Analytics workspace is an Azure cloud data store that centralizes, indexes, and queries telemetry and log data collected from various resources for monitoring, analysis, and troubleshooting.

A. Azure Monitor
Azure Monitor is a cloud-based observability service that collects, analyzes, and acts on telemetry data from applications and infrastructure running in Azure and other environments.
B. Alibaba Cloud Log Service
Alibaba Cloud Log Service is a fully managed, scalable logging and observability platform for collecting, storing, analyzing, and visualizing log data within the Alibaba Cloud ecosystem.
C. Microsoft Sentinel
Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution on Azure that helps organizations detect, investigate, and respond to threats at scale.
D. Power BI workspaces
Power BI workspaces are collaborative environments in Microsoft Power BI where users organize, manage, and share datasets, reports, and dashboards with specific groups or across an organization.
E. VividCortex
VividCortex is a database performance monitoring and analytics platform designed to help teams optimize and troubleshoot production database workloads in real time.
F. None of above. chosen

Statements (54)

Predicate	Object
instanceOf	Azure resource ⓘ log data store ⓘ monitoring workspace ⓘ telemetry data store ⓘ
canBeLinkedTo	Automation accounts (for runbooks) ⓘ linked to: Azure Automation Microsoft Sentinel ⓘ
collectsFrom	Arc-enabled servers ⓘ Azure Application Insights (via export) ⓘ linked to: Log Analytics workspace Azure Diagnostics extension ⓘ Azure Kubernetes Service ⓘ Azure Monitor agents ⓘ linked to: Azure Monitor Azure PaaS services ⓘ Azure platform logs ⓘ Azure virtual machines ⓘ network devices (via diagnostics and agents) ⓘ on-premises servers (via agents) ⓘ
configuredIn	Azure portal ⓘ
enables	capacity and performance analysis ⓘ compliance and audit reporting ⓘ root cause analysis of incidents ⓘ
hasCapability	analytics ⓘ centralized log collection ⓘ log indexing ⓘ log querying ⓘ monitoring ⓘ telemetry aggregation ⓘ troubleshooting support ⓘ
hasProperty	Azure region ⓘ data retention period ⓘ pricing tier ⓘ resource group association ⓘ subscription association ⓘ workspace name ⓘ
identifiedBy	Azure resource ID ⓘ
partOf	Azure Monitor ⓘ
providedBy	Microsoft Azure ⓘ linked to: Azure
stores	log data ⓘ metrics data (via Azure Monitor integration) ⓘ telemetry data ⓘ
supports	Azure Monitor Agent ⓘ linked to: Azure Monitor Diagnostic settings ingestion ⓘ Log Analytics agent (legacy) ⓘ alerts (via Azure Monitor alerts) ⓘ cross-resource queries ⓘ data export ⓘ data retention policies ⓘ role-based access control ⓘ saved queries ⓘ solutions and insights packs ⓘ workbooks ⓘ
supportsFeature	Kusto Query Language ⓘ
usedFor	operational monitoring ⓘ security monitoring (with Microsoft Sentinel) ⓘ
uses	Kusto Query Language ⓘ

How these facts were elicited