• a tool in Azure Monitoring to run queries on collected logs
• supports KQL
• we can get estimation from Azure regarding how long it would take to patch a server from crowd-sourced data.
• Implicitly it has scopes:
  • like on a vm we can go and check under Logs tag
  • on a resource group we can go and check logs
• Explicitly we have scope picker in Azure Log Analytics Workspace or under Logs tab under a resource
• We can query across Azure Log Analytics Workspace
• pricing is pay-as-you-go
• Log data is organised in tables

references:

MS Learn Regions that support