Azure Monitor-Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. What should we do for only searching VM resource logs?

    Customer is using 'Use resource or workspace permissions' in workspace.

    But customer wants to access only one VM resource in Log Analytics log search portal.

    What should we do for realizing request?

    I think we should use Custom Role for Log Analytics workspace.

    But I could not find correct action for Custom Role.

    https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-access#table-level-rbac

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  2. Ability to set Daily volume cap using Azure Powershell or AzureRM template

    Currently there is no other way to set "Data volume cap" for Log Analytics workspace except Azure Portal. When mass deploying workspaces for our customers it is very inconvenient.
    Powershell cmdlet similar to Set-AzureRmApplicationInsightsDailyCap would work.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  3. Ability to configure permissions on log types

    We need the ability to configure permissions or RBAC on log types as we want our developers to be able to query certain logs but block them from querying other logs that might have sensitive data.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  4. Please add a removal/delete option for Machines and VMs.

    We accidentally ran the MMASetup-AMD64.exe on a desktop computer instead of the intended VM. Now that desktop computer is added to our automation group, but we can't remove it very easily. It'd be really nice if a remove or delete option were available in the GUI and we didn't have to code a removal through powershell for something that could be simpler.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  5. Enable in UK West

    Flow logs have to use storage in the same region as the NSG, but then Traffic Analytics recommends that you use an OMS/LA workspace that's in the same region as your storage to minimise data egress.

    If you have an NSG in UK West, then that's impossible as OMS/LA is not available there.

    Either enable LA in UK West or provide free data egress for this purpose.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  6. Add the ability to regenerate individual keys (primary or secondary) via REST APIs

    The API claims to have a way of regenerating keys but it only seems to allow regenerating both keys at the same time. This defeats the purpose of having two keys since that is supposed to enable you to use one key while regenerating the other. This is also at odds with what is exposed in the Azure portal - where the primary and secondary keys each have a hyperlink to regenerate and seem to be able to regenerate independently.

    Link to API - https://docs.microsoft.com/en-us/rest/api/loganalytics/workspaces%202015-03-20/regeneratesharedkeys

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  7. Powershell to manage Custom Fields

    There is no Powershell cmdlet to manage Custom Fields on OMS Portal. So no way to automate this process. Isn't it?

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  8. Choosing default time range

    Would like an option to choose the default time range.

    It seems it defaults to last 24 hours and on some of my dashboards it shows me no data, but as soon as I change it to 7 days I see the data.

    35 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  9. Privileged Access Workstation Auditing / PAW Auditing

    I want to audit Admin's Privileged Access Workstation for protect Active Directory domain, Office 365, Azure and all.

    PAW = Privileged Access Workstation.
    PAW need a lot of Policy setting. GPO, Local GP

    https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/privileged-access-workstations

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  10. Rename workspace

    Ability to rename workspace should appear in new Azure portal after migration will be done.

    247 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    16 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  11. OMS Training

    Have a Microsoft Official Course Covering OMS, as the customer would love to understand this Suite and train their resources after purchasing the subscription but as of now, no option to get trained on this

    26 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  12. Rename Tiles/Queries in Dashboard

    Functionality to change the name of the query in the dashboard designer. Sometimes your results are valuable, even when they weren't exactly what you thought they would be in the tile visualization.

    23 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  13. Backup and restore workspace configuration settings

    Backup Workspace settings, dashboard, saved queries, and configuration - and be able to restore to a new workspace.
    Would help if configuration ever gets lost, corrupt, or we want to recreate a new workspace and keep some favorite settings.

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    planned  ·  2 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  14. Link Multiple Account into Workspace

    In this moment is possible manage only the resources linked to the Workspace account. This means that is not possible link a different account where I want have Backup/Automation status.

    As consultant this is a big limitation because I can monitor the computers from one subscription but not some advanced resources, in case the customer has Azure Backup/Automation.

    S

    28 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  15. Reuse workspace name

    cannot reused name of closed workspace?

    19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    Ok, I got this answer from the engineers and confirmed the current limitation – we will have to make a change for this:

    WorkspaceName is used to register the portal DNS, and it should be globally unique.
    We cannot reuse the workspace name now, because we dodn’t yet remove the DNS mapping when we do the CloseWorkspace operation.

  16. Security and Role Based Access Control (RBAC)

    Hi all. I have been trying to get my security team to allow us to join the preview, however they have been pushing back. Is there a way to control users' ability to only view data from inside the corporate network? I.e. not over the web.

    Also, within the product, can you give role based access, e.g. application teams only have access to app data etc?

    49 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  17. Bola carfasom

    Agent shop

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  18. Allow us to create Dashboards and Tiles through the CLI or a script

    It would be nice if we could generate new dashboards for new VMs via a script.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  19. Avoid syslog error if file does not exist in OMS Custom Log configuration to Linux VM

    When a new custom log is collected, syslog errors are generated on systems where it doesn't exist.
    Is it possible to change the OMS agent, to better handle this scenario.
    1. It should be possible from the custom logs to state which VM, this should apply to.
    2. It should be possible for the OMS agent, to check to if the directory exist or not and not flood our syslog with error. This would be better reported on OMS logs.
    E.g. do an ls to check the file, try not to use sudo out right that results in a syslog…

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    under review  ·  1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  20. Restrict user access to a computergroup.

    There should be a way to restrict a single user to only be able to see the log files from a single computer group.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    We do plan to evolve the access model in Log Analytics so users will be able to see logs based on permissions. We will use a slightly different model from the one proposed here but the principal is that users will see only logs from machines that they are permissioned to.

← Previous 1 3 4 5 6
  • Don't see your idea?

Feedback and Knowledge Base