Understanding Azure ADX, Log Analytics, and Application Insights: Use Cases, Data Retention, and Benefits

huangapple go评论79阅读模式
英文:

Understanding Azure ADX, Log Analytics, and Application Insights: Use Cases, Data Retention, and Benefits

问题

Azure ADX(Kusto)、Log Analytics(LA)和Application Insights(AI)。这三个Azure提供的服务对我来说有点令人困惑。在什么情况下我会选择其中一个而不是另一个呢?我了解当我为一个应用程序下面创建了一个AppInsights时,会同时创建一个LA。我可以从LA和AI都查询数据。然而,如果我创建一个新的LA并将AppInsights指向它,我仍然可以看到在这个更改之前已摄入的数据。

  1. AppInsights是否有自己的数据存储?那为什么需要LA?
  2. 如果AppInsights没有自己的数据存储,那么我是如何看到之前在先前的LA中摄入的数据的?

我大约有10个以上的AppInsights实例,是否建议将它们全部指向一个跨订阅的单个LA。这样做是否会有好处?比如在AppInsights之间串联遥测等。

当我将这些AppInsights切换到新的LA时,是否需要担心过去的数据,因为我看到即使切换到另一个AppInsights后,AppInsights仍然保留旧日志。

ADX似乎有自己的数据存储,那么在什么情况下我需要在LA之上创建这个额外的资源呢?我在考虑将LA数据带入ADX是否会在应用程序访问或串联遥测方面带来特定的好处。

英文:

Azure ADX (Kusto), Log Analytics (LA) & Application Insights (AI). These three offerings from azure are bit confusing to me. What is the situation when I will be using one over other. I understand when I provision an AppInsights underneath a LA is provisioned. I can query the data from both LA & AI. However, If I provision a new LA and point the AppInsights to it. I still see the data which was ingested before this change.
1. Does AppInsights has its own data store? then why does it need an LA.
2. If AppInsights does not have its own data store how I am seeing the data ingested in the previous LA.

I have around 10+ of AppInsights instances, is it recommended to point all of these to a single LA across subscriptions. Are there be benefit with this? Like stitching telemetry across AppInsights etc.?

When I switch over these AppInsights to a new LA, do I need to worry for the past data as I see the AppInsights still retains old logs even after switching to another AppInsights.

ADX seems to have its own data store, what are the scenarios where I need to provision this additional resource on top of LA. I am wondering bringing LA data to ADX will have any specific benefits in terms of application access or stitching telemetry.

答案1

得分: 2

That is a lot of questions you're asking! I'll try to get them answered.

我明白当我在 LA 下面创建一个 AppInsights 时,LA 也会被创建。

Correct, that is the new way of doing things, unless you use a Classic Application Insights Resource.

然而,如果我创建一个新的 LA 并将 AppInsights 指向它,我仍然可以看到在此更改之前引入的数据。

The older Classic Application Insights Resource does not use a Log Analytics Workspace. You can convert such a resource to use a Log Analytics Workspace.
The data ingested before this moment is indeed still available but is subject to the retention settings as stated in the docs:

> Your classic resource data persists and is subject to the retention settings on your classic Application Insights resource.

That means that there will be a moment the old data isn't available anymore and all data is stored in the Log Analytics Workspace.

1. AppInsights 是否有自己的数据存储?那为什么需要 LA。2. 如果 AppInsights 没有自己的数据存储,那么我是如何看到之前 LA 引入的数据的。

The classic Application Insights resources did have their own storage and as such, did not need a Log Analytics Workspace. New workspace-based resources do not have their storage and rely on a Log Analytics Workspace.

Converted Application Insights resources do use Log Analytics Workspace, but for a smooth transition, the data before the conversion is still accessible until the retention period is elapsed.

我想知道将 LA 数据带到 ADX 是否会在应用程序访问或组合遥测方面有任何特定好处。

No, you can have multiple Application Insights resources pointing to the same Log Analytic workspace to make cross-resource queries easier. But even before that, you could already create such queries.

我有大约 10 个以上的 AppInsights 实例,是否建议将它们都指向跨订阅的单个 LA。这样做是否有好处?例如,在 AppInsights 之间组合遥测等。

That is totally up to you. If you need to assign different permissions to different users to access data per application, you might want to separate the resources; otherwise, it could be fine to use one Log Analytics workspace. As cross-resource queries are already easy to create, that is not a real benefit, I think.

Azure ADX (Kusto)、Log Analytics (LA) 和 Application Insights (AI)。Azure 中的这三个服务对我有点令人困惑。我应该在何时选择其中一个而不是其他。

Application Insights depends on Log Analytics and is part of Azure Monitor. It is meant to be used for application diagnostics, logging, and traces, among others.

Azure ADX is an offering geared towards real-time analysis on large volumes of data streaming from applications, websites, IoT devices, and more. Its purpose is analyzing business data.

英文:

That is a lot of questions you're asking! I'll try to get them answered.

I understand when I provision an AppInsights underneath a LA is provisioned.

Correct, that is the new way of doing things, unless you use a Classic Application Insights Resource.

However, If I provision a new LA and point the AppInsights to it. I still see the data which was ingested before this change.

The older Classic Application Insights Resource does not use a Log Analytics Workspace. You can convert such a resource to use a Log Analytics Workspace.
The data ingested before this moment is indeed still available but is subject to the retention settings as stated in the docs:

> Your classic resource data persists and is subject to the retention settings on your classic Application Insights resource.

That means that there will be a moment the old data isn't available anymore and all data is stored in the Log Analytics Workspace.

1. Does AppInsights has its own data store? then why does it need an LA. 2. If AppInsights does not have its own data store how I am seeing the data ingested in the previous LA.

The classic Application Insights resources did have their own storage and as such, did not need a Log Analytics Workspace. New workspace based resources do not have their own storage and rely on a Log Analytics Workspace.

Converted Application Insights resources do you Log Analytics Workspace but for a smooth transition the data before the conversion is still accessible until the retention period is elapsed.

I am wondering bringing LA data to ADX will have any specific benefits in terms of application access or stitching telemetry.

No, you can have multiple Application Insights resources pointing to the same Log Analytic workspace to make cross resource queries easier. But even before that you could already create such queries.

I have around 10+ of AppInsights instances, is it recommended to point all of these to a single LA across subscriptions. Are there be benefit with this? Like stitching telemetry across AppInsights etc.?

That is totally up to you. If you need to assign different permissions to different users to access data per application you might want to seperate the resources, otherwise it could be fine to use one Log Analytics workspace. As cross resource queries are already easy to create that is not a real benefit I think.

Azure ADX (Kusto), Log Analytics (LA) & Application Insights (AI). These three offerings from azure are bit confusing to me. What is the situation when I will be using one over other.

Application Insights depends on Log Analytics and is part of Azure Monitor. It is mend to be used for application diagnostics, logging and traces amongst others.

Azure ADX is an offering geared towards real-time analysis on large volumes of data streaming from applications, websites, IoT devices, and more. Its purpose is analyzing business data.

huangapple
  • 本文由 发表于 2023年6月9日 10:27:54
  • 转载请务必保留本文链接:https://go.coder-hub.com/76436820.html
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定