An administrator needs to configure a diagnostic setting for an Azure Standard Load Balancer named `lb-prod-web` to analyze health probe logs. The configuration must meet the following requirements:
* Allow the team to run Kusto Query Language (KQL) queries to troubleshoot probe failures.
* Retain the log data for days.
* Minimize administrative effort and cost.
Which configuration should the administrator implement?
- AConfigure the diagnostic setting to archive logs to an Azure Storage account, and configure a lifecycle management policy to delete logs after days.
- BConfigure the diagnostic setting to stream logs to an Azure Event Hub, and configure the Event Hub namespace retention to days.
- Configure the diagnostic setting to send logs to a Log Analytics workspace, and set the data retention period on the workspace to days.Cevap
- DConfigure the diagnostic setting to send logs to a Log Analytics workspace, and configure a retention policy of days in the diagnostic setting itself.
Cevap
Configure the diagnostic setting to send logs to a Log Analytics workspace, and set the data retention period on the workspace to days.
To analyze logs using KQL queries, the logs must be sent to a Log Analytics workspace. Because retention settings within the diagnostic setting resource itself are deprecated and not applied to Log Analytics workspace destinations, the retention period of days must be configured on the Log Analytics workspace itself.
Adım Adım Çözüm
Anahtar Kavram
Azure Monitor Diagnostic Settings Destinations and Retention Policies