Questions tagged [azure-log-analytics]

Use for Azure Monitor Log Analytics questions (was: OMS)

Azure Monitor Log Analytics is a service in Azure that monitors your cloud and on-premises environments to maintain their availability and performance (used to be known as Operations Management Suite - OMS). It collects data generated by resources in your cloud and on-premises environments and from other monitoring tools to provide analysis across multiple sources. This article provides a brief discussion of the value that Log Analytics provides, an overview of how it operates, and links to more detailed content so you can dig further.

1047 questions
3
votes
1 answer

Proxy settings on Azure Log Analytics agent on Linux systems

I am deploying Azure Log Analytics agent to an Ubuntu 18 VM. It is done with Azure Policy by using Microsoft.EnterpriseCloud.Monitoring.OmsAgentForLinux extension. I need to set proxy configuration. On windows systems, the proxy setting can be set…
MoonHorse
  • 1,966
  • 2
  • 24
  • 46
3
votes
1 answer

How to fetch IIS Start log for a corresponding IIS Stop log in Azure Log Analytics outside of Alert's monitoring time period

I'm working on configuring an Azure Log Analytics alert (using KQL) to capture the IIS Stop & Start events (from Events table) in my OMS Workspace, and if the alert query finds that there's no corresponding IIS Start event log generated from a PaaS…
Yash Gupta
  • 1,807
  • 15
  • 21
3
votes
1 answer

Azure AKS pod logs are shown with 30+ minute delay in Log Analytics

There is an AKS cluster in Azure with a microservices app (NodeJS) deployed. The app is streaming logs to Application Insights (and to Log Analytics) using application insights. All settings are by default: maxBatchSize & maxBatchIntervalMs. When…
Sergey
  • 381
  • 6
  • 24
3
votes
1 answer

In azure how to concatenate strings in a summarize statement?

I have a statement where I try to concatenate logs (strings) together to a single string. Something like this ContainerLog | where conditions | summarize strcat(LogEntry) However I cant figure out how to concatenate strings like this since strcat…
Bomaz
  • 1,871
  • 1
  • 17
  • 22
3
votes
1 answer

Logging to Azure Log Analytics custom fields using Serilog

I'm new to azure and also a rookie in .net, so this may be a noob question :) Anyway, I have successfully managed to log to Azure Log Analytics using this code snippet: var loggerConfig = new LoggerConfiguration(). …
jihonsvik
  • 43
  • 6
3
votes
1 answer

Azure AKS application logs for the application running in Pod from Azure Portal?

We can access pod related logs from Log Analytics Workspace but there are no app logs (similar to what we see in kubectl get events). I was referring the Azure documentation but I am still unable to access Application Pod logs from Azure Portal
Srinivas Bandaru
  • 311
  • 1
  • 4
  • 16
3
votes
1 answer

How to get sum() by Column by Date in Kusto

I want to have a report with a metrics of sum by count by some column by date in LogAnalytics. So far I could use - Perf | summarize sum(CounterValue) by TimeGenerated, Computer which gives me below result in screenshot. But I want in a format per…
Anirban Nag 'tintinmj'
  • 5,572
  • 6
  • 39
  • 59
3
votes
1 answer

Azure Event Hub diagnostic set up for User Errors

I am running a set up, where Stream Analytics job is reading from Azure Event Hub. Event Hub is contained within a namespace and there is consumer group created for SA specifically. Recently I noticed User Error on Event Hub metrics. Event Hub…
3
votes
1 answer

Kusto: How to unpivot - turn columns into rows?

Using the StormEvents table on the Samples database on the help cluster: StormEvents | where State startswith "AL" | where EventType has "Wind" | where StartTime == "2007-01-02T02:16:00Z" | project StartTime, State, EventType, InjuriesDirect,…
sherifffruitfly
  • 415
  • 5
  • 14
3
votes
3 answers

Azure LogAnalytics Parse JSON Array

I am ingesting some custom logs to Azure LogAnalytics. One of the columns contains nested json objects. I would like to return each nested object to a separate column value. Was trying the mvexpand statement but have not had any luck. customLog_CL |…
Sean
  • 63
  • 1
  • 4
3
votes
2 answers

How to set color for Columnchart in Azure Data Explorer

I want to render specific requests from my Application Insights as a columnchart using Log Analytics query language: My Query: requests | where operation_Name == "MyOperationName" | render columnchart Output: I would like to have different colors…
Marc
  • 3,905
  • 4
  • 21
  • 37
3
votes
2 answers

Check if a table exists in Kusto language?

Is there a way to programmatically check if a table is existent in log analytics using the kusto language? For example, let's suppose I want to check if a workspace contains the VMConnection table something like : IF OBJECT_ID('*objectName*', 'U')…
Zack ISSOIR
  • 964
  • 11
  • 24
3
votes
2 answers

What is the right way to store queries in a C# program?

I have written a program that uses an Azure API to run queries against the Azure log analytics repository. The language used to write this query is called Kusto. I have a lot of Kusto queries that I used directly in my C# code. Something like…
user10691876
3
votes
2 answers

Getting logs for Azure Container Instance that freezes

We have an Azure Container instance that seems to be freezing under heavy load. And we are able to cause this through a load test. I am not looking for the exact solution to that right now, but what I am confused about is that I can't seem to get…
chuckw87
  • 647
  • 1
  • 6
  • 14
3
votes
1 answer

Log Analytics - Pricing tier doesn't match the subscriptions billing model

I have a log analytics resource setup on perGB and I am trying to deploy a solution that uses an Azure Automation account. When deploying, I see the error in my log analytics resource :Pricing tier doesn't match the subscriptions billing model. It…
etowah_man
  • 161
  • 9