Accessing StorageBlobLogs Data via Analytics API in Postman Returns Empty Response

Question

Service: Azure Storage, Diagnostic - Storage Blob Logs, Azure Workspace

Summary: Not getting StorageBlobLogs data from Azure Workspace Logs While accessing from Postman Client but accessible within Azure Portal

Details: I enabled diagnostics settings for blob in Azure Storage and kept destination as a Workspace.

I am able to see the logs in Azure Storage Account- Monitor logs section and also in the Workspace > Logs section also and was able to query the StorageBlobLogs table comfortably.

I am trying to access the same data using a log Analytics API from A postman Client, It always return empty data..

I got the proper Bearer token pass work all the app ID, Client ID and secret ID and resource as "https://api.loganalytics.io"

With that token calling the Analytics API given below from postman Client

https://api.loganalytics.io/v1/workspaces/

Answer 1

Hello Waulite Tech,

Thank you for posting your question in the Microsoft Q&A forum.

There are several potential causes for receiving an empty response when accessing StorageBlobLogs data via the Analytics API in Postman. I have listed few below with possible solutions:

1. Storage Analytics logging might not be enabled for your storage account. So, you may need to ensure that logging is enabled for the required services (e.g., Blob service). Useful info -https://techcommunity.microsoft.com/blog/azurepaasblog/leveraging-storage-analytics-logs-to-analyze-who-accessed-the-storage-account/2173539
2. The query parameters used in the API request might be incorrect or incomplete. So, verify that you are using the correct query parameters, such as the date range and log type. - Useful link - https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/storagebloblogs
3. The account used to access the logs might not have the necessary permissions. You may need to ensure that the account has the required permissions to read the logs.
4. The API endpoint being used might be incorrect or not properly configured. Please ensure and double-check the API endpoint URL and ensure it is correctly formatted. - Useful link - https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/storagebloblogs

Please let me know if this helped to resolve the issue on your side. Please remember "Accept Answer" if above reply helped, so that others in the community facing similar issues can easily find the solution.