1. Azure Log Analytics (v2) New and Improved
6/1/2018 1:42 PM
BRK3269
Azure Log Analytics (v2) New and Improved
Ketan Ghelani
Principal GPM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Built-in security and management in Azure
Enterprise-grade services native in the Azure platform
Microsoft Azure

3. Full stack of cloud management capabilities
PROTECT
SECURE
CONFIGURE
GOVERN
Security Management
Threat Protection
Backup
Disaster Recovery
Policy Management
Cost Management
Configuration
Update Management
Automation
Scripting
Microsoft Azure
Log Analytics and Diagnostics
MONITOR
App, Infra, & Network Monitoring

4. Azure security and management momentum
6/1/2018 1:42 PM
8.8x
Increase in machines under update management
+145%
Ingested log data
Azure security and management momentum
+531%
Protected Instances in the last 12 months
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Linux Server Microsoft Azure Data ingestion and correlation App
frontend
Real-time correlation
and analytics
Middleware
Application
Insights
Backend
Built-in operational
visibility
Microsoft Azure
Log
analytics
Operating
system
Linux Server
Data ingestion and correlation
Virtual
machine
Flexible turn-key integrations
Networking
Virtual network
DNS
Load balancer
Monitor
Actionable app-aware insights

6. Azure Log Analytics Interactive query Flexible integrations
6/1/2018 1:42 PM
Azure Log Analytics
Interactive query
Flexible integrations
Connect and collate data from multiple sources incl. multi-vendor solutions
Smart analytics
Search and query with expressive language for rich data exploration
Correlate and analyze using machine learning and advanced constructs
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Microsoft Monitoring Agent
Microsoft Build 2016
Azure Log Analytics Ecosystem
6/1/2018 1:42 PM
Ingestion
Exploration
Export & Correlation
Microsoft Monitoring Agent
Azure Extensions
Data Collector APIs
Linux
SCOM MP
Microsoft Azure Portal
Advanced Analytics Portal
Azure Monitor
Service Map
Power BI
Microsoft Flow
Application Insights Connector
Data Access REST APIs
Blob storage
Solutions
Security & Audit
Wire Data
Upgrade Compliance
HD Insights
VMWare
Antimalware
Network Performance Monitoring
Upgrade Readiness
SQL Assessment
Azure App Gateway
Azure Activity Logs
Device Health
AD Assessment
Azure NSG Analytics
Update Management
Office 365
Service Map
SQL Assessment Plus
Key Vault Analytics
Azure Automation
Azure SQL Analytics
Alert Management
Exchange Assessment
MORE….
Change Tracking
Azure Containers
Capacity Management
SP Assessment …
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Journey to Azure Log Analytics Guiding Principles
Microsoft Build 2016
6/1/2018 1:42 PM
Journey to Azure Log Analytics Guiding Principles
Introduce new analytics language early
Familiar user experience reducing learning curve
Tools/documentation to ramp up quickly on new language constructs
Ensure continuity through transition
Ample time with side by side experience
Continue developing/on boarding new solutions as needed
Auto upgrade of existing queries/searches/alerts
Migration tools for Solution
Upgrade simulations
99% success rate on simulation runs
Open feedback channel
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Demos 1) One Click Upgrade Experience 2) Helper Tools (Converter & Language)

10. FAQs and Known Issues My dashboard will be read only
6/1/2018 1:42 PM
FAQs and Known Issues
My dashboard will be read only
View Designer and Azure Dashboards. Existing tiles become read-only.
Search API will be deprecated by Dec
Use the new Azure log analytics API.
PowerBI integration now replaced with PowerBI Desktop Integration
Any existing schedules will be disabled.
Alert actions using web hooks and runbooks will need to be updated
Need to conform to a different response format.
For more details, see the known issues and FAQs page
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Customers love it…. Microsoft Build 2016 6/1/2018 1:42 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. What’s New & Improved ? Powerful Query Language Advanced Operators
Calculated Columns
Search time field Extractions
Correlate across solutions (Joins)
Rich string/datetime Operators
Functions
Powerful Query Language
Time series analysis functions
ML operators
Set Operations (Makeset, Makelist)
Advanced Operators
Syntax highlighting
Multi line query editor
Rich visualizations
Click 2 Diagnose
Analytics Portal
Power BI Desktop
Azure Dashboards
View Designer
Dashboards & Views

13. Demos 3) Analytics Portal (Power BI / Azure Dashboards) 4) Advanced Query examples

14. What’s New & Improved ? Powerful Query Language Advanced Operators
Calculated Columns
Search time field Extractions
Correlate across solutions (Joins)
Rich string/datetime Operators
Functions
Powerful Query Language
Time series analysis functions
ML operators
Set Operations (Makeset, Makelist)
Advanced Operators
Syntax highlighting
Multi line query editor
Rich visualizations
Click 2 Diagnose
Analytics Portal
Power BI Desktop
Azure Dashboards
View Designer
Dashboards & Views

15. Road to GA Late Oct - Dec Generally Available (Automatic Upgrades)
Private Preview (Invitation Only)
200+ workspaces
Some of the largest OMS customers including MSIT
Available in 3 regions
Public Preview (Optional Upgrade)
All supported OMS public regions
Top Solutions migrated
Documentation / Community site
50% of workspaces upgraded
Generally Available (Automatic Upgrades)
All Solutions migrated
Automatic upgrades of all remaining workspaces
Late Oct - Dec
Aug 8th
Jun 1st

16. Azure security & operations management sessions
6/1/2018 1:42 PM
Azure security & operations management sessions
Join one of our 25 breakout sessions or come visit our booth in the Expo Hall
Code
Title
Time Slot
BRK 3378
Datacenter Transformation—A Roadmap for Platforms, Processes, and People
Monday 4:00–5:15
BRK 1027
Azure security and management for hybrid environments
Tuesday 9:00–10:15
BRK 3201
Simplify hybrid cloud protection with Microsoft Azure Security Center
Tuesday 10:45–12:00
BRK 2101
Business continuity for your business running in IaaS
Tuesday 12:30–1:45
BRK 2201
Gain full-stack insights into your hybrid IT environment and take action with Azure solutions
Tuesday 2:15–3:30
BRK 1023
System Center for the modern datacenter: First look at advancements coming this year
Tuesday 4:00–5:15
BRK 1024
Implement a secure and well-managed strategy for your Azure resources
Wednesday 9:00–9:45
BRK 2238
Implement Governance in Azure at Scale with Policy-based Management
Wednesday 9:00–10:15
BRK 3139
Respond quickly to threats with next-generation security operation, and investigation
Wednesday 10:45–12:00
BRK 2145
Optimize Azure for Disaster Recovery
Wednesday 12:30–1:45
BRK 3124
Manage Microsoft Azure at enterprise Scale: The Microsoft IT story
Wednesday 12:45-1:30
BRK 3128
PowerShell Unplugged with Jeffrey Snover and Don Jones
Wednesday 2:15–3:30
BRK 3212
Cloud attacks illustrated: How unique insights from Microsoft help you defend against attacks
Wednesday 4:00–5:15
BRK 3100
Manage Configurations and Update/Patch Windows and Linux Servers with Azure Management
BRK 2061
Make the most of Azure by using Cloudyn to monitor, allocate and optimize your cloud spend
Thursday 9:00–10:15
BRK 2396
Protect Azure IaaS deployments using Microsoft Azure Security Center
BRK 3106
Ensure application availability with Azure Site Recovery
Thursday 10:45–12:00
BRK 3223
Analyze & Debug applications across your DevOps workflow with Azure Application Insights
BRK 3129
Manage hybrid cloud and transform your workplace with PowerShell and Azure Automation
Thursday 12:30–1:45
BRK 2212
Gain visibility into network performance and availability with network monitoring solutions in Azure
Thursday 12:45–1:30
BRK 3132
Protect your data with Microsoft Azure Backup
Thursday 2:15–3:30
BRK 2092
Azure Management technical framework for partner extensibility
Thursday 4:00–5:15
BRK 3211
Microsoft System Center 2016 in action: Customer use cases to implement today
BRK 3269
The improved Azure Log Analytics: A powerful query language with machine learning, and more
Friday 10:45–12:00
BRK 3210
Defense against the dark (cloud) arts: Azure security deep dive
Friday 12:30–1:45
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Please evaluate this session
Tech Ready 15
6/1/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. 6/1/2018 1:42 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.