Questions tagged [azure-log-analytics]

Use for Azure Monitor Log Analytics questions (was: OMS)

Azure Monitor Log Analytics is a service in Azure that monitors your cloud and on-premises environments to maintain their availability and performance (used to be known as Operations Management Suite - OMS). It collects data generated by resources in your cloud and on-premises environments and from other monitoring tools to provide analysis across multiple sources. This article provides a brief discussion of the value that Log Analytics provides, an overview of how it operates, and links to more detailed content so you can dig further.

1047 questions
0
votes
1 answer

Public sample Logs table to demonstrate Kusto

The kusto tutorial references a Logs table. Is this data available publicly somewhere so as to try kusto out on a very large data store?
Graham Williams
  • 556
  • 2
  • 10
0
votes
2 answers

makeset operation not preserve ordering?

The following command does not produce a consistent ordering of items: KubePodInventory | where ClusterName == "mycluster" | distinct Computer | order by Computer asc | summarize makeset(Computer) But upon reading the documentation (see here) it…
Dave New
  • 38,496
  • 59
  • 215
  • 394
0
votes
1 answer

Tabular type used with "in" condition

How can I use a tabular type in an in conditional statement? See the last condition in the second query below: Computer in clusterNodes. I get the following syntax error: Query could not be parsed at 'in' on line [9,181] Token: in Line: 9…
Dave New
  • 38,496
  • 59
  • 215
  • 394
0
votes
1 answer

How to create multiple alert in same time using ARM template

I want to configure Log Analytics alert using ARM templates so just following given link:- https://learn.microsoft.com/en-in/azure/azure-monitor/insights/solutions-resources-searches-alerts#sample But problem is, I am working on a requirement to…
0
votes
1 answer

Share Log Analytics reports

I'm creating some Log Analytics to collect data from Event Hub and Application Insights. Can Log Analytics reports be viewed by users outside of Azure? For example, can I give to my client a dashboard or report? If not what is the solution?
Enrico
  • 3,592
  • 6
  • 45
  • 102
0
votes
0 answers

NSG Flow Logs don't appear in Azure Monitor

I cannot find corresponding NSG flow logs for the action that I manually triggered. NSG Flow Logs are enabled and configured in the Azure portal under Network Watcher -> NSG Flow Logs. Only default rules are used for outbound NSG. Here is what I…
0
votes
1 answer

Authenticate to Azure Log Analytics Api using OAuth2.0 Client credentials

I am trying to access my Azure app registered in Azure Active Directory(AAD). I am using the OAuth2.O Client credential protocol (https://dev.loganalytics.io/documentation/Authorization/OAuth2). Using the Rest client (Postman) I am able to…
Jeevika
  • 155
  • 1
  • 4
  • 18
0
votes
1 answer

Azure log analytics: monitoring successful sign-ins following repeated sign-in failures

I'd like to use Azure Log Analytics to create a monitoring alert for possible brute-force attempts on my users' accounts. That is to say, I'd like to be notified by Azure (or, at the very least, be able to manually run the script to obtain the data)…
hailnolly
  • 33
  • 1
  • 10
0
votes
2 answers

Same SourceComputerId in Log Analytics for cloned machines

Recently we had cloned new machines to our system but they are still reporting to Log Analytics with the SourceComputerId property from the source machine (which new ones was cloned from). How to fix it? We tried to reinstall the agents but it…
kopieczek.dev
  • 706
  • 8
  • 26
0
votes
1 answer

AKS custom log log analytics

I'm not able to collect customs logs inside a pod. I can not find a clear procedure for doing this with log analytics. For example, I want to collect the Solr logs that are in a pod (/opt/solr/server/logs/solr.log) I followed this procedure :…
0
votes
2 answers

Store and query static data in log analytics

While creating custom log search alerts in log analytics workspace, I want to store some data and query it in alert query. Basically, it is a mapping like ABC -> DEF, GHI -> JKL. These mappings can be changed manually. I am looking a solution like…
user10340130
0
votes
1 answer

Is there an ARM template solution to create OMS alerts for Log analytics

I am trying to create an oms workspace with alerts attached to it through ARM templates. I already created an OMS workspace and for the alert part I followed the following tutorial. After some struggle why my alert won't deploy i saw in the commands…
0
votes
1 answer

Kusto -- generate data diff / delta --

I created a custom data type to store some configuration of an external product. So each day I send the configuration of this specific product / service ( multiple rows but with identical data model) to the Log Analytics data store. Is there a…
Jens
  • 181
  • 1
  • 13
0
votes
1 answer

how to log service topic messages in azure?

I found a way to query the AzureActivity Log in Azure to get a result set of changes that were made to Service Bus Topics like add, rename, delete. The result of changes includes info like TimeGenerated, HttpRequest, ResourceId. But this result set…
0
votes
1 answer

Azure Monitor alert cross-resource log search error

According to https://learn.microsoft.com/en-us/azure/log-analytics/log-analytics-cross-workspace-search we can now perform cross-resource queries in Azure Log Analytics. We've created a sample query that works fine in Log…
Roman
  • 4,531
  • 10
  • 40
  • 69