Integration with APM collection
Add APM collection to log management
This (assuming it is from SCOM APM events?) is currently not prioritized but let’s see where it lands.
Daniele Muscetta commented
Gordon have you checked the 'Alert Management' IP yet?
With that, APM Alerts ("Server Application Exception" and "Server Performance Exception" and those APM Alerts will be also pulled out and visible in search.
They carry the full XML payload of the original alert.
i.e. sample query
Type:Alert AlertSeverity:Warning AlertState!=closed AlertName:"Server Application Exception"
or I can even search the full text index and search for a specific exception, of function name, etc
Of course a shape that would offer faceting over 'request time' or 'exception class' would be better suited - but I thought I'd mention it as a step in that direction...