Questions tagged [azure-log-analytics]

Use for Azure Monitor Log Analytics questions (was: OMS)

Azure Monitor Log Analytics is a service in Azure that monitors your cloud and on-premises environments to maintain their availability and performance (used to be known as Operations Management Suite - OMS). It collects data generated by resources in your cloud and on-premises environments and from other monitoring tools to provide analysis across multiple sources. This article provides a brief discussion of the value that Log Analytics provides, an overview of how it operates, and links to more detailed content so you can dig further.

1047 questions
6
votes
1 answer

How to parse json array in kusto query language

How to parse json array in kusto query language. I have an output column which is having value in JSON array format as shown below. I Need to parse it to get values in form of two columns. {"count": 14 "value": [ { …
Neha
  • 87
  • 1
  • 2
  • 7
6
votes
2 answers

Export ARM Template for Azure Log analytics Alerts created from Portal

I have created Azure Log Analytics (Monitor) Alert to monitor the Logic App Failures and I have done this using Azure portal. I would like to know how can we export the Alert created from Azure Portal as an ARM template? Anyone know how we can…
user42012
  • 722
  • 12
  • 33
6
votes
1 answer

What's the difference between transfer-response and forward-request errors in API management?

A large number requests over our Azure API Management result in the ClientConnectionFailure exception. By querying the logs I see two variants of the error: exceptions | where cloud_RoleName == "..." | summarize num = count(itemCount) by…
6
votes
2 answers

KQL group by with same result as the drag and drop group feature

When using the Monitor, Log feature in Azure Portal you can group rows by dragging and dropping a column header into a certain box, the problem is that this is not saved when pressing the save button. How do I write KQL that generates the same…
DarkWizard96582
  • 63
  • 1
  • 1
  • 5
5
votes
1 answer

Add a row with total in Log Analytics Kusto query

I query a request log for a summary of status codes. However I would like to add a row at the end of the results, showing the total number of requests. How do I add such a row? Current query (simplified) MyLog | summarize count() by…
5
votes
1 answer

Show Kusto query plan like EXPLAIN

I find myself using the Kusto query language (KQL) via Azure Log Analytics, and I'm struggling to find a way to get any sort of detailed execution report or query plan. In PostgreSQL I'd use EXPLAIN to produce a report on how the DBMS intends to…
Craig Ringer
  • 307,061
  • 76
  • 688
  • 778
5
votes
1 answer

Why does Azure create the 'DefaultResourceGroup-WEU' resource group and the log analytics workspace within?

I am setting up the production environment/resource group for a project. Azure constantly creates a resource group called DefaultResourceGroup-WEU and places a DefaultWorkspace-bfcb05a5-938f-4336-9e3c-a5963f10acb7-WEU log analytics workspace in it.…
5
votes
1 answer

any way to find & change which Log Analytics workspace being used by Application Insights

Trying to find any way to change Log Analytics workspace being used by Application Insights. As of now, all the data being written to the default workspace from all the subscriptions(have more than 1 subscription). Planning to create one workspace…
5
votes
4 answers

Convert UTC 'TimeGenerated' to local time in Azure monitor/log/analytics, when using "summarize by"

I have this simple query MyLog | summarize avg(executionTimeInMS_d) by bin(TimeGenerated, 5min) I'd like the summary to be in my local time zone, not UTC. This does not work : MyLog | summarize avg(executionTimeInMS_d) by bin(TimeGenerated-5,…
Greg Bala
  • 3,563
  • 7
  • 33
  • 43
5
votes
3 answers

Method to put alerts on long running azure data factory pipeline

I have some data factory pipelines which may sometimes run beyond 2 hours when copying data from blob into SQL. The time period is variable, but I'd like to be notified/alerted when any pipeline runs beyond 2 hours. What are possible ways of doing…
DhruvJoshi
  • 17,041
  • 6
  • 41
  • 60
5
votes
2 answers

How to do percentiles on custom metrics in Azure AppInsights?

I've used Prometheus to store performance metrics and query the results as percentiles (ex. 95th percentile response timing). I used prometheus-net to emit them. What is the equivalent in Azure AppInsights? I see there are percentile functions in…
5
votes
1 answer

Unable to authorize Azure LogAnalytics Workspace

I am trying to connect to my workspace in the Azure Portal. I am getting the error as Operation returned an invalid status code 'Unauthorized'. The creds object has fetched the Authentication Token and I have added resource permissions to my app…
5
votes
1 answer

OMS Logical disk performance counters not existing disk instancename

We use Azure OMS to monitor many of our on premise servers. When using the LogicalDisk(*)\% Free Space performance counter there are some non existing instanceNames for example HarddiskVolume170, HarddiskVolume89, ... When checking perfmon on the…
4
votes
1 answer

How to make an Application Insights kusto query sort correctly on performanceBucket?

Is there a way to make an Application Insights kusto query sort on performanceBucket 'correctly', i.e. on bucket duration? When I summarize or sort using performanceBucket and don't specify a sort I get something like this (note for example that…
Rory
  • 40,559
  • 52
  • 175
  • 261
4
votes
2 answers

How to determine cause of Azure EventGrid message delivery failure?

How do I determine the cause of an EventGrid message delivery failure? Tried so far: Set a Diagnostic Setting on the EventGrid System Topic Open Log Analytics and query the AEGDeliveryFailureLogs table…
ericOnline
  • 1,586
  • 1
  • 19
  • 54
1
2
3
69 70