Support for creating a new table in Log Analytics workspace

[clemlesne]

Is there an existing issue for this?

• [X] I have searched the existing issues

Community Note

• Please vote on this issue by adding a :thumbsup: reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment and review the contribution guide to help.

Description

It is not feasible at the time to have a azurerm_monitor_data_collection_rule targeting a log_analytics because is requiring a new table in Log Analytics workspace.

It should be feasible to create tables within azurerm_log_analytics_workspace or within a dedicated resource, we could call azurerm_log_analytics_table.

New or Affected Resource(s)/Data Source(s)

azurerm_log_analytics_workspace

Potential Terraform Configuration

No response

References

• https://learn.microsoft.com/en-us/rest/api/loganalytics/tables/create-or-update?tabs=HTTP

[tombuildsstuff]

SDK for this one: https://github.com/hashicorp/go-azure-sdk/tree/main/resource-manager/operationalinsights/2022-10-01/tables

[favoretti]

I added a resource that currently only supports retention mangling. I'm planning to work on expanding this resource to support full table management. I'm assigning this to myself, if anyone else is already working on it - get in touch please.

[stijndehaes]

@favoretti are you still working on this? I noticed you create the first PR to support retention, but I don't think any progress was made to support full table management correct?

[janfickler]

@favoretti i would also appreciate that the creation of the tables would be possible with the azurerm-terraform provider. creating it with - resource "azapi_resource" "data_collection_logs_table" - is not so cool. I guess azurerm-terraform provider should support that :-)

[favoretti]

Hey all,

I'm unfortunately completely swamped at work - so if anyone else wants to take this on - by all means, please do.

If not - I'll try to get to this at some point :) can't promise a deadline though, I apologize.

I'm not an HC employee, so all the work here is purely volunteering or driven by my clients' needs (somewhat egoistic, but it is what it is)