Azure Monitor-Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. About update management documentation

    Regarding the operation of Update Management of Log Analytics, Linux has no detailed disclosure information on Windows. We confirmed support and confirmed using yum, but I would like to improve the information on Linux monitoring.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  2. Restrict user access to a computergroup.

    There should be a way to restrict a single user to only be able to see the log files from a single computer group.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    We do plan to evolve the access model in Log Analytics so users will be able to see logs based on permissions. We will use a slightly different model from the one proposed here but the principal is that users will see only logs from machines that they are permissioned to.

  3. tag

    Default Log Analytics contributor access to create alerts.
    I understand RBAC is being worked on currently as OMS merges into ASC/the Azure portal, currently alerts can't be created with Log Analytics Contributor access which should be part of the access.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  4. Settings information

    Please show the subscription ID in the OMS console under settings + the region. It makes it easier to configure a connection from Azure Automation for access the OMS Search API

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  5. Masquer les solutions acquises

    Bonjour, je pense qu'il serait interressant de masquer les solutions déjà acquise. Cela rendrait les autres solutions plus visibles sur OMS.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  6. Enable in UK West

    Flow logs have to use storage in the same region as the NSG, but then Traffic Analytics recommends that you use an OMS/LA workspace that's in the same region as your storage to minimise data egress.

    If you have an NSG in UK West, then that's impossible as OMS/LA is not available there.

    Either enable LA in UK West or provide free data egress for this purpose.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  7. View Designer cmdlets

    Need a way to interact with View Designer programmatically...perhaps with some View Designer PowerShell cmdlets. Importing, saving, deleting, exporting all thru the OMS portal is slow and time consuming, especially at scale.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  8. Avoid syslog error if file does not exist in OMS Custom Log configuration to Linux VM

    When a new custom log is collected, syslog errors are generated on systems where it doesn't exist.
    Is it possible to change the OMS agent, to better handle this scenario.
    1. It should be possible from the custom logs to state which VM, this should apply to.
    2. It should be possible for the OMS agent, to check to if the directory exist or not and not flood our syslog with error. This would be better reported on OMS logs.
    E.g. do an ls to check the file, try not to use sudo out right that results in a syslog…

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    under review  ·  1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  9. Allow multiple OMS instance logins

    The recent login "upgrade" now locks me into one OMS instance at a time. Allow for logging into multiple OMS instances again!

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  10. Add support for days in alerts feature for both alert frequency and alert suppression

    We need more flexibility for the alert triggers that allows both weekly and monthly triggers. Basically you should add support for days triggers and perhaps also a date trigger would be great.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  11. Assign friendly names to the servers instead of trying to identify them by their hostnames

    It becomes difficult to identify servers by their hostnames when the hostnames by mandate do not indicate the purpose of the server. However this makes it a challenge when the same appears on the OMS dashboard. It would be very useful if the server can be assigned a friendly name which would make it easy to identify the server.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  12. Provide soft delete function for data, not just Workspace

    Currently it is possible to immediately and irrevocably delete data stored in a Log Analytics Workspace by reducing the data retention setting. This provides the possibility for user error - with increased probability via automated deployment routes - to lose significant amounts of data.

    This concern could be reduced if it were possible to set a soft delete option for the data, akin to the way it works in Key Vault, meaning a two-stage 'purge' would be required, making it harder to accidentally remove historic data.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for your feedback and its now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

  13. Scope Management Solutions to only Log Analytics

    When adding new solutions to a workspace on the Azure Portal the UI shows all the multiple management solutions which do not apply to the workspace resource i.e. DynaTrace, Nutanix, etc.
    The "Solutions Gallery" in the "Old" OMS Portal is a lot clearer and easier to use.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  14. Powershell to manage OMS Portal Accounts

    There is no Powershell cmdlet to manage User Access Rights to OMS Portal e.G. Microsoft Account for only reading etc.
    So no way to automate this process. Isn't it?

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  15. Account Management not working

    In standalone price tier i cant get to manage accounts setting page. When i navigate to it its blank. It is working fine on free tier.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  16. 3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  17. Even if you add a counter with ">" "<" "in Windows Performance Counter, information is not collected

    Even if you add a counter with ">" "<" "in Windows Performance Counter, information is not collected.

    For example, the following items


    • SQLServer:Locks(*)\Lock Timeouts (timeout > 0)/sec

    • SQLServer:Batch Resp Statistics(*)\Batches >=000000ms & <000001ms

    > <& To & gt; & lt; & amp; & gt; Even if you do not collect information

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  18. RBAC role/scope for workspace create relative to resource group

    I would like to be able to assign a user to a role at the resource group level (and not subscription level) that would allow that use to create a new workspace

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  19. add multiple storage and automation account accros multiple subscriptions.

    Would it be possible to add multiple storage account across multiple subscriptions. this can also be applied to the Automation.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  20. Add the ability to regenerate individual keys (primary or secondary) via REST APIs

    The API claims to have a way of regenerating keys but it only seems to allow regenerating both keys at the same time. This defeats the purpose of having two keys since that is supposed to enable you to use one key while regenerating the other. This is also at odds with what is exposed in the Azure portal - where the primary and secondary keys each have a hyperlink to regenerate and seem to be able to regenerate independently.

    Link to API - https://docs.microsoft.com/en-us/rest/api/loganalytics/workspaces%202015-03-20/regeneratesharedkeys

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base