Questions tagged [azure-log-analytics]

Use for Azure Monitor Log Analytics questions (was: OMS)

Azure Monitor Log Analytics is a service in Azure that monitors your cloud and on-premises environments to maintain their availability and performance (used to be known as Operations Management Suite - OMS). It collects data generated by resources in your cloud and on-premises environments and from other monitoring tools to provide analysis across multiple sources. This article provides a brief discussion of the value that Log Analytics provides, an overview of how it operates, and links to more detailed content so you can dig further.

1047 questions
2
votes
1 answer

Azure API Management logs request and response bodies

I would like to log the request and response bodies of my API calls in Azure API Management for debugging purpose. To do that I have created a Log Analytics workspace and configured the diagnostic settings to store the logs in it. But when I check…
2
votes
2 answers

Kusto query calculate 2 metric fields

I'm doing a query in Kusto on Azure to bring the memory fragmentation value of Redis, this value is obtained by dividing the RSS memory by the memory used, the problem is that I am not able to do the calculation using these two different fields…
2
votes
2 answers

Access dashboard's time range and granularity from KQL

I've added a chart using KQL and logs from Azure Log Analytics to a dashboard. I'm using make-series which works great but the catch is the following: The logs I'm getting might not extend to the whole time range dictated by the dashboard. So…
krontogiannis
  • 1,819
  • 1
  • 12
  • 17
2
votes
1 answer

Find logs of POD in AKS using Log Analytics Query

There is a AKS running that is connected to Log Analytics in Azure. I'm trying to view logs of named PODs using the following query snippet: let KubePodLogs = (clustername:string, podnameprefix:string) { let ContainerIdList = KubePodInventory …
mko
  • 113
  • 2
  • 8
2
votes
1 answer

Azure update management generate patch status report in a csv format

I'm creating a Azure Automation runbook to generate a report on the patch status of the virtual machines under a management group. The query used is as below union Update , workspace('xxxx').Operation,workspace('yyyy').Operation | where…
2
votes
1 answer

How do I extend this RegEx with CEF data with these two KeyValue pairs?

I currently have this regex: ?P\w+)=(?P[a-zA-Z0-9-_:/@. ]+ Input row 1: event=1921;json={"source":"A","location":B":"folder":"c:\\windows\\system32"},"id":2,"address":null,"name":"gone"; Input row 2:…
Just J
  • 63
  • 6
2
votes
1 answer

Azure Funtions C# How to log custom messages from a class using reflection to azure monitoring logs or analytics monitorlng logs

I'm using WebJobsStartup with my azure function. In Startup.cs file , I'm loading say abc.dll from my another project using reflection and invoking it's main method. I want to get logs from this called method(abc.dll) along with HttpTrigger…
2
votes
1 answer

Azure Log Analytics - How to view logs from last x days but only between certain hours?

I'd like to look at the app gateway 500 error logs over the last x number of days. But for those x number of days, I'd only like to see the logs that came in between 11:00 and 13:00 UTC. How can I do this? Here's what I have so far but it's not…
2
votes
0 answers

Azure monitor application start /stop timings

I have a spring boot application is deployed to Azure Kubernetes. Currently, I have enabled HeartBeatState telemetry and by having the start azure spring boot dependency, I get HTTP requests telemetry info. I am not sending any custom telemetry to…
2
votes
1 answer

Azure Log Analytics - expanding a property

I'm fairly new to using log analytics and not very familiar with the KQL language yet for queries. I'm trying to do a query that will get the objectID value out of what appears to be a multi-valued property from the query. When I do a standard…
deniscooper
  • 49
  • 2
  • 7
2
votes
0 answers

Alerting from a custom event in azure application insights not firing

I have a .net application uploading customEvents to application insights. I'd like to create an alert to trigger when a scanning (like a heartbeat) message hasn't been sent. If I run the following log query I get back what I think looks like…
2
votes
2 answers

Kusto Query Language: set column name of summarize by evaluated expression

Me again asking another Kusto related question (I really wish there would be a thorough video tutorial on this somewhere). I have a summarize statement, that produces two columns for y axis and one for x axis. Now i want to relabel the columns for x…
Maverick1st
  • 3,774
  • 2
  • 34
  • 50
2
votes
1 answer

Structured logging in an Azure Function v3 with Azure Log Analytics

I'm trying to use structured logging by logging in my Azure Function like this: log.LogError("Failed to get object. ({customerId}, {objectId}, {errorMessage})", request.CustomerId, request.ObjectId, errorMessage); My Azure…
2
votes
1 answer

How to Query Across Log Analytics and Application Insights in Azure Monitor

This answer summarizes that App Insights (AI) and Log Analytics (LA) are being merged into one service. It also provides a suggestion that new resources in AI can point at LA, so that all your code is in one place. My question is how can I query…
2
votes
0 answers

Can I integrate Log Analytics with log4j2?

Use-case: Running Spark job in Databricks and monitoring logs in LogAnalytics. Issue: In Veracode report, I am getting security vulnerabilities(CRLF) with Slf4j logger. I am looking for other approaches, with Log4j2 I don't see any issues. Now my…