Skip to main content

Azure Log Analytics - Query From Saved Search

This Playbook is part of the Azure Log Analytics Pack.#

Executes a query from a saved search in Azure Log Analytics.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • AzureLogAnalytics


This playbook does not use any scripts.


  • azure-log-analytics-get-saved-search-by-id
  • azure-log-analytics-execute-query

Playbook Inputs#

NameDescriptionDefault ValueRequired
saved_search_idThe ID of the saved search to run.Required
timespanThe timespan over which to query data. This is an ISO8601 time period value. This timespan is applied in addition to timespans that are specified in the query expression.Optional

Playbook Outputs#

AzureLogAnalytics.Query.QueryThe executed query.string
AzureLogAnalytics.Query.TableNameThe name of the query table.string

Playbook Image#

Azure Log Analytics - Query From Saved Search