azure_log_analytics_kusto_query_with_default_credential.py

1import os
2from datetime import timedelta
3from azure.monitor.query import LogsQueryClient, LogsQueryResult
4from azure.identity import DefaultAzureCredential
5from azure.core.exceptions import HttpResponseError
6
7# Replace with your Log Analytics Workspace ID
8LOG_WORKSPACE_ID = "YOUR_WORKSPACE_ID"
9
10def main():
11    # DefaultAzureCredential expects the following environment variables:
12    # AZURE_TENANT_ID, AZURE_CLIENT_ID, and AZURE_CLIENT_SECRET
13    credential = DefaultAzureCredential()
14    client = LogsQueryClient(credential)
15
16    query = """
17    AppRequests
18    | take 5
19    """
20
21    try:
22        # The query spans the last 24 hours
23        response = client.query_workspace(
24            workspace_id=LOG_WORKSPACE_ID,
25            query=query,
26            timespan=timedelta(days=1)
27        )
28
29        if response.status == LogsQueryResult.SUCCESS:
30            data = response.tables
31            for table in data:
32                for row in table.rows:
33                    print(row)
34        else:
35            # Handle partial failure or error
36            error = response.partial_error
37            print(f"Query failed: {error.message}")
38
39    except HttpResponseError as err:
40        print(f"Service error: {err}")
41
42if __name__ == "__main__":
43    main()