Define, save, and share a search of log data
Define, save, and share searches of log data to help determine the causes of Log Analytics alerts.
Before you begin
Role required: evt_mgmt_operator or evt_mgmt_admin
Important:
From the Vancouver release onward, the Operator Workspace is deprecated and replaced with Service Operations Workspace. For the new procedure, see the corresponding topic in the Service Operations Workspace for ITOM documentation: Define, save, and share a search of log data.