VinTekh
All sources
Integration

Azure Log Analytics

Run KQL against your workspace from anywhere in VinTekh — the Resource Detail logs tab, Investigation evidence, ad-hoc queries here. Scope: Log Analytics Reader.

Connect with Service Principal

One workspace per source. Add another later for additional regions.

How you'll see this source in the list.

Microsoft Entra ID → Overview → Tenant ID.

App registration → Overview → Application (client) ID.

Certificates & secrets → New client secret → copy the Value column.

Workspace → Overview → Workspace ID. Different from the workspace resource path.

Credentials are encrypted at rest with AES-GCM. Never logged.

One-line bootstrap

Per workspace, in Cloud Shell

SUB=<subscription-id>
RG=<resource-group>
WS=<workspace-name>
az role assignment create \
  --assignee <app-client-id> \
  --role "Log Analytics Reader" \
  --scope /subscriptions/$SUB/resourceGroups/$RG/providers/Microsoft.OperationalInsights/workspaces/$WS
Workspace RBAC docs