Use log groups to store logs that you collect. Log Groups are located in a compartment to provide user access control to logs stored in that log group.

To create a log group, see Create Log Groups to Store Your Logs.

The user who should enable log collection must have a minimum USE permission on the log-analytics-log-group resources in the compartment or tenancy. The user that will query logs needs READ on the log-analytics-log-group for the compartment or tenancy. The individual resource-type log-analytics-log-group is part of the aggregate resource-type loganalytics-resources-family. If you create the blanket policy for the aggregate resource-type, then it also covers log-analytics-log-group. For Logging Analytics policies documentation, see IAM Policies Catalog for Logging Analytics. However, if you want to provide a more granular access control to the individual resource type, then see Allow Users to Perform All Operations on Log Groups.

To perform other actions on the log group, in the Log Groups listing page, select the log group Compartment, and narrow down your search for your log group in the Scope section. After identifying your log group, click Actions icon in the corresponding row:

• View Details: The log group details page is displayed. View the details of the log group and edit, if required.

• Edit: The Edit Log Group dialog box is displayed. You can modify the description of the log group here.

• Copy OCID: The OCID of the log group resource is copied. You can use it to refer to this resource anywhere in Oracle Cloud Infrastructure.

• Move Resource: The Move Resource to a Different Compartment dialog box is displayed. From the options, select the compartment to which you want to move the log group and click Move Resource.

• Add Tag: See Add Tags to Logging Analytics Resources.

• Delete: You may have to delete some of your old or unused log groups to conform to the service limits of Logging Analytics. See Limits by Service in Oracle Cloud Infrastructure Documentation. To delete the log group, confirm in the Delete Log Group dialog box.