Questions tagged [azure-log-analytics]

Use for Azure Monitor Log Analytics questions (was: OMS)

Azure Monitor Log Analytics is a service in Azure that monitors your cloud and on-premises environments to maintain their availability and performance (used to be known as Operations Management Suite - OMS). It collects data generated by resources in your cloud and on-premises environments and from other monitoring tools to provide analysis across multiple sources. This article provides a brief discussion of the value that Log Analytics provides, an overview of how it operates, and links to more detailed content so you can dig further.

1047 questions
3
votes
1 answer

Azure Log Analytics switch statement / pattern matching

I'm trying to process my Application Insights data using Application Insights Analytics and Log Analytics Query Language. What I'd like to have is something like switch statement in C# or pattern matchng in F#. So the pseudocode would be like…
mickl
  • 48,568
  • 9
  • 60
  • 89
3
votes
0 answers

Ways to transfer data to OMS

I am trying to gather all the possibilities through which I can import the data occasionally to OMS in Azure from Azure SQL database and Azure App Insights. The only possibility that I could find is using the SQL Server connector for importing data…
3
votes
1 answer

Difference between Microsoft Monitoring Agent (MMA) and OMS Agent

There are two types of monitoring agents used for Azure virtual machine: Microsoft Monitoring Agent (MMA) and Operation Management Suite (OMS). These can be used to connect to Azure Log Analytics workspace and sound interchangeably. What are main…
EagleDev
  • 1,754
  • 2
  • 11
  • 31
3
votes
1 answer

Python application logging with Azure Log Analytics

I have a small Python (Flask) application running in a Docker container. The container orchestrator is Kubernetes, all running in Azure. What is the best approach to set up centralized logging? (similar to Graylog) Is it possible to get the…
Tibor
  • 651
  • 1
  • 8
  • 18
3
votes
1 answer

OMS Log Analytics 8MB PowerBI Query Limit workarounds?

So I am querying data directly from OMS Log analytics using PowerBI Desktop, and I believe there is an 8MB hard limit on the data returned by the query. The problem I have is that I need to query about 30 000 rows, but hit the 8MB limit around 18…
2
votes
2 answers

How to use the CorrelationId of an Azure SAS token?

I have a web application generating user-delegated SAS tokens authorized by the managed identity for the app. I want to be able to monitor who uses the tokens, so I added a Correlation Id in the scid field of the token. However, this does not show…
2
votes
1 answer

What is the difference between ApplicationInsights TrackEvent and ILogger LogInformation

If I'm already logging certain "events" via ILogger (_logger.LogInformation), are there any advantages to adding (or changing to) telemetryClient.TrackEvent?
2
votes
2 answers

Azure Logs does not have all data

I have an Azure Function and all calls I can see: but when I go to "Logs" and try the following query: traces | project timestamp, message, operation_Name, operation_Id, cloud_RoleName | where cloud_RoleName =~…
Oleg Sh
  • 8,496
  • 17
  • 89
  • 159
2
votes
1 answer

Calculate Time difference between two operation using kusto query

I would like to Calculate Time difference between two operation where operation name contains ID using kusto query. please find attached snapshot that contains table and required output. It would be helpful if anyone can share Kusto query to achieve…
Kumar
  • 399
  • 4
  • 16
2
votes
1 answer

KQL return size of tables in a LAW with size in GB, MB, KB

I want to calculate the size of each table in a given Log Analytics workspace and have the sizes returned in GB, MB etc. The following code works partially , but since I'm not using the units arg the format_bytes func is not returning expected…
2
votes
1 answer

Convert disk size from megabytes to gigabytes in KQL query

I have following query that helps me data from vm disk InsightsMetrics | where Namespace == "LogicalDisk" | extend Tags = todynamic(Tags) | extend Drive=tostring(todynamic(Tags)["vm.azm.ms/mountId"]) | extend…
Bombbe
  • 153
  • 1
  • 11
2
votes
1 answer

Azure Log Analytics - Comparing Two message traces to raise an alert if one updates

I have a Function App that pulls the Azure public key usng a PowerShell script and outputs it into log analytics. I am trying to get notified if the public key updates. At the moment, I am comparing the top two results to see changers. Does anyone…
Mike Love
  • 21
  • 1
2
votes
1 answer

Can I disable all logs and metrics except the ContainerLogs?

I use Azure Kubernetes service, which is connected to Log Analytics Workspace. Log Analytics Workspace collects too much data, what is quite expensive. After googling the ways to reduce the costs I found a few recommendations, but most of them about…
Farad
  • 885
  • 2
  • 9
  • 25
2
votes
1 answer

how to dynamically get all nested properties from JSON Array object in Azure KQL

I am trying to get all data disks present on VM from Azure Resource Graph Query. I am able to get specific data disk by specifying the index( for example properties.storageProfile.dataDisks[0].name for first disk) but but how do I get this…
2
votes
1 answer

Merge a JSON array into a JSON object in Kusto

Let say I have a log analytics table like this: datatable(Computer:string, TimeGenerated:datetime, data:dynamic) [ "comp1", datetime(2019-02-07 16:31:15), dynamic('[{prop1: 2}, {prop2: 0.8}, {prop3: 12.204532}, {prop4: 0}]'), "comp2", …