Azure Monitor-Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Minify on W3CIISLog

    Minify works great for logs. Specifically we would like to get REST endpoints our of the csUriStem

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    planned  ·  1 comment  ·  Search UI and Language  ·  Flag idea as inappropriate…  ·  Admin →
  2. Change a saved search (hassle free)

    Add the ability to change a saved search, without having to remember the exact same name and group to override the existing query. At the same time a rename function would be nice.

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Search UI and Language  ·  Flag idea as inappropriate…  ·  Admin →
  3. Need more status update than "let it run overnight" "wait several hours"

    Need more status update than "let it run overnight" "wait several hours". It would be great to get additional status. For example: we've successfully connected to your onpremise System Center server. OR you need to setup a connection before we can pull data. OR we're currently pulling data (1GB out of 10GB).

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    There are a few different requirements and different things that can happen for each intelligence pack. Some of that troubleshooting needs to be done on-premises (the service doesn’t know what it has never seen…). Refer to our troubleshooting blog post for the latest http://blogs.technet.com/b/momteam/archive/2014/05/29/advisor-error-3000-unable-to-register-to-the-advisor-service-amp-onboarding-troubleshooting-steps.aspx

    Nevertheless, onboarding has been greatly simplified (a few times, leading to GA of the service) in the last year, including the introduction of the ‘Settings’ tile (hub), and the scale of the service has improved to deal with higher data rates (not making you wait too long, basically, see this http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6519343-real-time-near-realtime-data-collection ).

    We think we are in a much better place than when you filed this idea, do you agree?

  4. Restrict user access to a computergroup.

    There should be a way to restrict a single user to only be able to see the log files from a single computer group.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    We do plan to evolve the access model in Log Analytics so users will be able to see logs based on permissions. We will use a slightly different model from the one proposed here but the principal is that users will see only logs from machines that they are permissioned to.

  5. Add "render" option for query language

    Can we please have an option to display search results into different types of graphics? Similar to Kusto (or Application Insights Analytics) which has an option to render the search results into different graphics.
    For example:
    requests
    | where timestamp >= ago(24h)
    | summarize requestCount=count() by client_CountryOrRegion
    | order by requestCount desc
    | render piechart

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Search UI and Language  ·  Flag idea as inappropriate…  ·  Admin →
  6. resource ID for Linux machines

    Currently the heartbeat info for Linux does not include the resource group or resource id information that is available for windows machines through OMS. This would be very helpful when querying across linux/windows machines.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  7. Incorrect CCE-38444-6 Baseline Check

    When reviewing Azure Log Analytics Baselines and review CCE-38444-6 it always shows as failing the audit

    Digging deeper it looks like it is Expecting a Result of Disabled when actually Disabled is 0 due to this registry key being a DWORD value and Not STRING

    See Screenshot Below

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Security and Audit Solution  ·  Flag idea as inappropriate…  ·  Admin →
  8. 6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Service Map  ·  Flag idea as inappropriate…  ·  Admin →
  9. alert

    When you configure an Alert rule after completing it should always send a Test email alert so you can check if the alerting is working.

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Alert Management Solution  ·  Flag idea as inappropriate…  ·  Admin →

    Thank you for feedback.
    We are looking at ways to enable you to test all actions/notifications in an associated Action Group, not just email.

    We will revert soon with details when we have rolled out the functionality.

  10. Office365 ObjectID

    OfficeObjectID in the Office365 Preview needs to be indexed field.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)

    Thanks for the feedback!

    We are adding this to the list of upcoming updates to the Office 365 search fields. Please note that we do not update the search fields frequently, so this change will not be visible in a short time.

    Please let us know in case you require other changes in the O365 search fields, so we will consider them before next iteration..

    Thanks!

  11. Service Map unsigned driver error

    When installing Dependency Agent 9.0.1. I receive an error.

    See attached screenshot.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Service Map  ·  Flag idea as inappropriate…  ·  Admin →
  12. Current User listed on top bar.

    The current user should be listed on the top right bar along with the ability to log out. It is not important to display the Data Plan.

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  13. Copy Performance Counters Across Workspaces

    Allow Performance Counters to be copied across workspaces. This would allow performance counters to be created and validated in a dev workspace and copied to a production workspace.

    The experience would be similar to reading and saving Saved Queries and Computer Groups.

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  14. 1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    planned  ·  0 comments  ·  OMS Gateway  ·  Flag idea as inappropriate…  ·  Admin →
  15. Aliases for Connected Computers/Sources

    I would really like to have the ability to assign aliases to computer names in OMS - for instance, having computer name "WIN-2DUHT78" be displayed in OMS as "Production2". Maybe allow filtering/searching using the aliases as well.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
  16. tooltip for menu

    tooltips on the icons in the top right menu (settings, help, feedback, etc.)

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  17. Smaller tiles

    Smaller tiles would be great to give one a better dashboard view instead of having to scroll

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
2 Next →
  • Don't see your idea?

Feedback and Knowledge Base