Azure Monitor-Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Add custom field support for ARM templates

    For now it's only possible to add custom fields through the Azure portal. In order to automate this process, it would be nice to have a way to deploy custom fields through ARM templates as well.

    19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  2. [Bug] - ARM dataSources Properties

    Any chance to release the Microsoft.OperationalInsights/workspaces/datasources schema properties for the following kinds?


    • ChangeTrackingPath

    • ChangeTrackingDefaultPath

    • ChangeTrackingDefaultRegistry

    • ChangeTrackingCustomRegistry

    • CustomLog

    • CustomLogCollection

    • GenericDataSource

    I have tried the following below and gets a Bad Request response back.
    {
    "apiVersion": "2015-11-01-preview",
    "type": "datasources",
    "name": "WindowsChangeTrackingRegistry-CopyHookHandlers",
    "dependsOn": [

    "[concat('Microsoft.OperationalInsights/workspaces/', parameters('workspaceName'))]"
    

    ],
    "kind": "ChangeTrackingDefaultRegistry",
    "properties": {

    "enabled": true,
    
    "keyName": "HKEY_LOCAL_MACHINE\\Software\\Classes\\Directory\\Shellex\\CopyHookHandlers",
    "recurse": true

    }
    }

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  3. Azure VM State

    I'm deploying OMS for a customer who would like to see a dashboard and receive an alert if an Azure VM is stopped instead of deallocated. Is this possible today with existing solutions that do not utilize Azure Automation?

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  4. Query ResourceId from within a VM

    We have multiple test environments in different Azure resource groups. Each test environement is isolated but they have the same "computername fqdn"; have the same AD setup. At present the only workaround is to use the Azure VM extension, but it is limited.

    If we can query the resourceid a VM belongs to from inside the VM, and if every OMS record has "resourceid" as a parameter for Azure VM's, it would be really helpful.

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  5. Add support for Managed Service Identity (MSI)

    If Log Analytics had support for MSI then we wouldn't have to deal with client IDs and secrets in apps running on a VM that has an identity in AAD, and can acquire MSI tokens.

    We would like to control for each VM according to its role, to be able to read/write/manage the Log Analytics workspace.

    https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/services-support-msi#azure-services-that-support-azure-ad-authentication

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  6. Help to configure monitoring for Notification Hub in Log Analytics via ARM portal

    Help to configure monitoring for Notification Hub via Log Analytics in ARM portal

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  7. Backup solution

    Can you enable Backup Solution for ARM Backup Vault?

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  8. Log Analytics Alerts Resource Type changes from what is in Template

    When programatically deploying Log Analytics Custom Query search Alerts, the template specifies a resource type of "Microsoft.OperationalInsights/workspaces/savedSearches/schedules/actions" Once the deployment finishes though, the Alert resource type shows "Microsoft.Insights/scheduledQueryRules"

    I'm using this documentation to deploy my alerts:
    https://docs.microsoft.com/en-us/azure/monitoring/monitoring-solutions-resources-searches-alerts

    When I use that template I'm able to easily surpass the quota of 800 resources per Resource Group which is great, I have thousands of alerts I'd like in one resource group. When I attempt to deploy Application Insights Alerts to the same Resource Group, I get a ResourceQuotaExceeded exception.

    Application Insights Template documentation:
    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitor-alerts-unified-log-template

    The Resource Type shouldn't change from what's in…

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  9. Provide shortcut link to Azure Marketplace from OMS Solutions blade in the Azure Portal

    Provide shortcut link to Azure Marketplace (OMS Solutions) from OMS Solutions blade in the Azure Portal directly.

    Makes it easier for people to find solutions from both Microsoft and the Community

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  10. [Bug] - ARM sharedKeys is not a valid resource type for API Version 2015-11-01-preview

    Unable to use REST according to the documentation https://docs.microsoft.com/en-us/rest/api/loganalytics/workspaces/getsharedkeys for API Version 2015-11-01-preview to obtain primarySharedKey and secondarySharedKey values.

    Please advise. Thank you.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  11. Network traffic monitoring in azure cloud

    Provide an option to capture the following params for any traffic in the azure cloud.
    1. Source IP
    2. Source Port
    3. Destination IP
    4. Destination Port
    5. Traffic Direction
    6. Protocol
    7. Action taken

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  12. ast

    good apps

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  13. Cpu and memory Utilization of all deployed services in kubernetes cluster.

    We were would like to get the CPU and Mem Utilization of all deployed services for the Kubernetes Cluster.
    The requirement is to get the CPU and Mem Utilization of each services separately in Single View within the dashboard.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  14. Can we add an new column "ACS(Azure Container Service)Cluster name" in the Container Monitoring solutions Table

    In the Table "Type=ContainerInventory ContainerState=Failed | measure Count(ContainerState) by Computer, Image", it is very difficult to identify which node belongs to which cluster. Appreciate if we can get a ACS cluster name colum in this table

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  15. RBAC - Advanced Settings & Custom Logs without RG-level Contributor Access

    Currently, in order to create custom logs or access Advanced Settings in Log Analytics, users require at least Contributor access at the Resource Group level. This is a significant set of permissions and we'd like to be able to define custom RBAC definitions in accordance with principles of least privilege and still allow teams to be able to create custom logs/access advanced settings within their Log Analytics asset.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for the feedback. Your feedback is now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

  16. 1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  17. Need a metric for AKS Docker container restrarted count inside a pod.

    Originally the Idea is to show the count of Docker Container getting restarted inside the pod and the Same should appear in the dashboard
    The existing setup allows us to see the container status like Running, Failed, Pending, succeeded and Unknown.
    The Developers would like to have the count of the restart so that they can understand the application behaviour.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Azure Resource Management  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base