0
votes

I've been setting up monitoring Azure Databricks in an Azure Log Analytics Workspace and managed to get logs going to an existing log analytics workspace I have.

However, I failed to notice that an ARM template was supplied for setting up a new workspace that contains a bunch of useful KQL saved queries.

I would like those saved queries in the log analytics instance I've started out with already, is there a way I can import them?

I've noticed there is an API for creating or updating saved queries, however, this seems to only create / update individual queries and I would prefer to import all the queries mentioned in the above link in one go. Is this possible?

1

1 Answers

0
votes

No, there is no such feature for importing them.

You should create these saved queries by yourself, by using azure portal, or Saved Searches - Create Or Update rest api, or azure cli commands: az monitor log-analytics workspace saved-search create etc.