Log Analytics, Diagnostic Settings, and KQL Troubleshooting

Practice the Azure Monitor and Log Analytics skills that administrators use to investigate problems.

You will create a Log Analytics workspace in an approved Azure region and connect a diagnostic setting that streams platform logs into it. Because workspace ingestion latency is unpredictable (often several minutes), the gradeable KQL work validates each query's structure against the expected sample table names. You will author and save reusable Kusto Query Language (.kql) files covering Heartbeat health checks, Activity Log auditing, and resource diagnostic troubleshooting patterns, then verify your query structure locally before comparing the workspace in the Azure portal.