Azure Monitor-Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Improve multitenancy for managed services providers

    Currently we can have one subscription per MG and/or consolidate multiple MGs into one single subscription. What's missing is the ability to have groups of different systems from the same MG to report to different subscriptions. In management as a service scenario for SMB customers it's often impractical to have 1 MG per customer, rather multiple customers are consolidated into one infrastructure (MG) and then access is limited via scoping. Bring this to Advisor, please.

    299 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    7 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  2. Export dashboard customizations

    It would be really nice if we could export dashboards as a template. As part of the Microsoft IR team, we plan to create a standard desktop fed off of the same sources for multiple customers during compromise recovery. If there was a way to export \ import a pre-configured dashboard it would be really useful.

    21 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  3. Per Server Usage

    Ability to see GB usage per monitored server.

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    The new usage views includes the ability to see the amount of data per computer

    The included views will give you information on:
    • How much data is sent to Log Analytics and by which Computers
    • How much data is sent for each solution
    • How much data isn’t associated with a computer
    • Which computers are sending data and which computers haven’t recently sent data
    • How many nodes are sending data for each of the OMS offers (Insight & Analytics, Automation & Control, and Security and Compliance)
    • How long it takes for Log Analytics to make data searchable

    -Richard

  4. Data usage per solution

    Check data usage per solution

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  5. 'Settings' page does not load (needs Silverlight)

    Settings screen remains blank. Tried in IE10 and Chrome.

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  6. Dashboard Theme

    Please can you add the ability to change the theme so that it's consistent with the Azure Portal (Black).

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  7. When adding organisational accounts as admins need a filter\find button on account browse pane

    So just went to add some admins in, chose my organization then clicked to browse and had to manually search for account. It would be good to have a filter\find button at the top of this pane to let me put the first few letters of the user in.
    With a large organization having to manually browse through the directory is not practical

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  8. Add Organization button not available

    The Add Organization button is greyed out

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  9. Resource Manager VM & Operation Insight

    Not sure if it is a bug. When we create an Ops Insight work space, it is possible only from Old portal (new portal redirects the connection to old portal, for Ops Insight). In this case...if we create ARM Vms which is possible via only New portal..., and if we want to see if a VM is enabled for Ops insight or not...how is possible ? If I got to Ops Inisight section in old portal ie "Ops Insight Workspace --> servers "., we never see the Resource Manager VMs. it shows only classic Vms with 'Operation Insight Enabled /…

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  10. Operational Insights Requirements

    Hi, how are you? I would like to know what are the Operational Insights requirements for example, what port I need to have available, etc.

    I'm attentive to your comments, thank you so much, regards!

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  11. Grant access to security group - members are always asked to create a new workspace

    When granting access to the MMS workspace using a security group, members of this group always got the error "The Microsoft account you used is not associated with an Microsoft Operations Management Suite workspace. Do you want to create a new Microsoft Operations Management Suite workspace?" while obviously this user is:
    * first not a MSA but a work account (Office 365/Azure AD) synched
    * member of the security group granted for access

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  12. Add organizational accounts from another directory as users or admins

    We have added users from another directory into the current directory associated with the subscription where OMS has been deployed, but we cannot add those external users as admins or users in OMS.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  13. Operational Insights onsite agent collector

    This is a question for Azure Operational Insights.

    Can we an option to install a soft of agent and collector at the same time? Why this request?
    - I will like to send event from many source to one device only in one segment or area of my environment, and this device will be the only one connecting with azure using my workspaced credential.
    I will like to send network (router, appliances) log to this device via port setting only, without go to an public network connection and have my network logs in Azure too.

    Windows Event Logs "Forwarded Events"…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  14. Why are we forced to change password when signing in or signing up?

    When I first signed up with the preview using my AzureAD "OrgID" it forced me to change my password - claiming the reason was needing to enforce password complexity.

    Now when I invite a Microsoft Account to the my preview service, that user gets the same experience.

    In both cases the claimed reason is flawed:
    1) The operational insights process should not KNOW what the password used to authenticate was - so can't tell if the passcode was "complex" or not
    2) The changed password is was no more complex than the one before it.

    If there is another reason…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    10 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    There is such a requirement when authenticating to enterprise-grade applications, especially for Microsoft accounts (formerly LiveID) which represent ‘individual’ identities (as opposed to ‘organizational’ identities). As you wrote, with LiveID’s you could have people whose passwords were last set back in Passport.net.

    Many users use Windows Azure Active Directory / Organizational accounts for an even higher degree of security – just extending their corporate AD, where you probably already have password complexity rules in place.

    We (OpInsights) don’t enforce pwd complexity in your WAAD tenants – Active Directory team told us that you should only be seeing the request to change your user’s password when you have a temporary password that needs to be changed (=one that is created when a new user account is created), or because your password has expired. It’s a “Change on first login” or a "password is expired’ message, basically.
    It has nothing to do…

  15. Allow non admin of AAD organization to associate organization with Advisor Account

    Example:
    Contoso.com administrators are the only ones who can associate Contoso.com as an organization to an advisor account. As long as some admin has previously given permission for Advisor to read Contoso.com azure active directory, Advisor should allow users of Contoso.com to configure an advisor account with Microsoft.com as the organization. In a large organization it would be too heavy handed to ask administrators of Contoso.com to do this.

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    We have completed our 1st-party integration with WAAD, and this has become possible, as the need to grant explicit consent has been lifted with this change.

    We still don’t allow adding users from different Org ID’s to the same workspace, and we still don’t allow users to change the Org Id associated with their subscription, anyhow.

  16. Adding Users under settings only lets me choose Microsoft Account

    I've seen the same issue listed below but without the explanation of how someone has got to where they are so...

    I've recently started the MAOI and added some on-prem servers
    we have an AD Federated on Azure
    I can see 'Microsoft Azure Operational Insights' in the AD Apps
    Access has been granted to MAOI

    on the MAOI portal I go to settings and scroll down to
    [ Manage Users ]

    if I add a user with their ORG ID it defaults to a Microsoft Account and this cant be changed/edited or selected as an option at creation.

    I am…

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  20 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  17. invalid workspace id

    When I install the agent and try to set the workspace ID I get the error "invalid workspace ID" .... The format is wrong
    But I copy-paste it???

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    7 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  18. Bug: Can not log in to Azure Operational Insights after update to OMS

    We can not log in to our pre-existing workspaces after the update to OMS.

    When I try to sign in from http://www.microsoft.com/en-us/server-cloud/operations-management-suite/overview.aspx or https://preview.opinsights.azure.com/ or SCOM integration I’m forwarded to this page https://www.mms.microsoft.com/Error.aspx?errorCode=589828 ;-(

    I am using a Microsoft account that happens to match my organizational ID. We never added our organization to the Preview.

    I have two workspaces one of which was created a few weeks ago. ID: 4869558c-689b-4ec5-a1af-9df9ef5c11b0

    Please advice.

    PS: I have a customer presentation on Tuesday and I'm beginning to panik ;-)

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  19. Control of data aggregation

    Allow more granularity with data 30 minute aggregation after 6 hours does not meet requirements to see raw data further out in time.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  20. Need ability to suppress notifications generated by Advisor alerts in Operations Manager

    After activating Advisor integration in our Operations Manager deployment, notifications started flooding out of our OpsManager environment. Because of the way OpsMgr notifications work, it is a non-trivial task to suppress notifications based on Advisor alerts. While Advisor is providing a ton of useful information, I don't feel that most of it is truly "critical" in the sense that I want to be awakened in the middle of the night to hear about it. For example, I don't want to get alerts sent to my phone/pager when another missing hotfix is detected. All of the missing hotfix alerts we have…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →

    Absolutely agree.

    We documented how to turn off the Alert Sync – see this previous item http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6519189-allow-for-more-control-over-alert-flow-back-into-s

    We don’t think the ‘Alert’ shape was fitting the bill when it came to PROACTIVE recommendation (as opposed to real high priority incidents happening in the environment, which is more the traditional OpsMgr scenario). For this reason we have been and are working with CSS on the new format of assessment – see the SQL one was just recently introduced. A lot of the content is the same, but we think this presentation is more useful and clear – http://blogs.technet.com/b/momteam/archive/2014/10/23/new-sql-server-assessment-intelligence-pack-in-advisor.aspx – and it does not get mixed and in the way of the ‘reactive’ stream of work.

← Previous 1
  • Don't see your idea?

Feedback and Knowledge Base