Azure Monitor-Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. What should we do for only searching VM resource logs?

    Customer is using 'Use resource or workspace permissions' in workspace.

    But customer wants to access only one VM resource in Log Analytics log search portal.

    What should we do for realizing request?

    I think we should use Custom Role for Log Analytics workspace.

    But I could not find correct action for Custom Role.

    https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-access#table-level-rbac

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  2. Ability to configure permissions on log types

    We need the ability to configure permissions or RBAC on log types as we want our developers to be able to query certain logs but block them from querying other logs that might have sensitive data.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  3. Please add a removal/delete option for Machines and VMs.

    We accidentally ran the MMASetup-AMD64.exe on a desktop computer instead of the intended VM. Now that desktop computer is added to our automation group, but we can't remove it very easily. It'd be really nice if a remove or delete option were available in the GUI and we didn't have to code a removal through powershell for something that could be simpler.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  4. Ability to set Daily volume cap using Azure Powershell or AzureRM template

    Currently there is no other way to set "Data volume cap" for Log Analytics workspace except Azure Portal. When mass deploying workspaces for our customers it is very inconvenient.
    Powershell cmdlet similar to Set-AzureRmApplicationInsightsDailyCap would work.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  5. Add the ability to regenerate individual keys (primary or secondary) via REST APIs

    The API claims to have a way of regenerating keys but it only seems to allow regenerating both keys at the same time. This defeats the purpose of having two keys since that is supposed to enable you to use one key while regenerating the other. This is also at odds with what is exposed in the Azure portal - where the primary and secondary keys each have a hyperlink to regenerate and seem to be able to regenerate independently.

    Link to API - https://docs.microsoft.com/en-us/rest/api/loganalytics/workspaces%202015-03-20/regeneratesharedkeys

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  6. Bola carfasom

    Agent shop

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  7. Allow us to create Dashboards and Tiles through the CLI or a script

    It would be nice if we could generate new dashboards for new VMs via a script.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  8. Enable in UK West

    Flow logs have to use storage in the same region as the NSG, but then Traffic Analytics recommends that you use an OMS/LA workspace that's in the same region as your storage to minimise data egress.

    If you have an NSG in UK West, then that's impossible as OMS/LA is not available there.

    Either enable LA in UK West or provide free data egress for this purpose.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  9. permission on search queries

    The query management is very native, friendly described, Missing tagging like who is the owner of a query, permissions who can add, modify and delete for a large workspace and with large team, it's horror.
    The query changes should have a version control.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  10. is there any way to display different solution from different Regions in a single workspace?

    Now we are using different OMS for different regions. need to display different solution from different Regions in a single workspace

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  11. Scope Management Solutions to only Log Analytics

    When adding new solutions to a workspace on the Azure Portal the UI shows all the multiple management solutions which do not apply to the workspace resource i.e. DynaTrace, Nutanix, etc.
    The "Solutions Gallery" in the "Old" OMS Portal is a lot clearer and easier to use.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  12. Restrict user access to a computergroup.

    There should be a way to restrict a single user to only be able to see the log files from a single computer group.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    We do plan to evolve the access model in Log Analytics so users will be able to see logs based on permissions. We will use a slightly different model from the one proposed here but the principal is that users will see only logs from machines that they are permissioned to.

  13. RBAC role/scope for workspace create relative to resource group

    I would like to be able to assign a user to a role at the resource group level (and not subscription level) that would allow that use to create a new workspace

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  14. Avoid syslog error if file does not exist in OMS Custom Log configuration to Linux VM

    When a new custom log is collected, syslog errors are generated on systems where it doesn't exist.
    Is it possible to change the OMS agent, to better handle this scenario.
    1. It should be possible from the custom logs to state which VM, this should apply to.
    2. It should be possible for the OMS agent, to check to if the directory exist or not and not flood our syslog with error. This would be better reported on OMS logs.
    E.g. do an ls to check the file, try not to use sudo out right that results in a syslog…

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    under review  ·  1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  15. Embedding Log Analytics Solutions to Third Party Web Apps

    Possibility of embedding OMS dashboards from solutions for external Web Apps for customers.
    There is the possibility of collecting data from OMS and integrate with Power BI and later embed this, but it is "raw" log information, not the pre-made dashboards in OMS solutions

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  16. Cloning a view in OMS and then selecting cancel deletes the original view!

    When copying a view by opening it and then clicking "clone" on top of it, selecting "cancel" not only deletes the cloned view but the original one, too!

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  17. HTTP / PowerShell Capability to Regenerate Primary and Secondary OMS Keys

    Currently the OMS Portal has the capability to regenerate the OMS primary and secondary keys. This must be a manual step. This is quite dangerous as the URL is open to the Internet - if anyone gets to know either key then they can do a HTTP POST into our OMS workspace. We need to be able to regenerate these over HTTP or PowerShell.

    There isn't any option of regenerating via the Azure Portal and I can't find any API that might allow this to be done. The only closest match I found is the 2015-11-01-preview API which is now…

    36 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  18. About update management documentation

    Regarding the operation of Update Management of Log Analytics, Linux has no detailed disclosure information on Windows. We confirmed support and confirmed using yum, but I would like to improve the information on Linux monitoring.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  19. Allow multiple OMS instance logins

    The recent login "upgrade" now locks me into one OMS instance at a time. Allow for logging into multiple OMS instances again!

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  20. Allow multiple Power BI accounts to be assigned to a workspace

    For shared workspaces connect more than one PowerBI account is very limiting.

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 6
  • Don't see your idea?

Feedback and Knowledge Base