Azure Monitor-Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Service Map to automate Micro Segmentation of NSGs

    As Service Map can Identify all network connectivity it would be very beneficial if it was possible to create Automated Suggestions for Microsoft Segmentation of Network Security Groups for the Security Admin to consider and Automate the Deployment of.

    45 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Service Map  ·  Flag idea as inappropriate…  ·  Admin →
  2. OMS ability to monitor & Alert on Azure changes such as Tags

    It would be great if it were possible to audit changes on Azure such as Tags, which we could then use to trigger runbooks. Currently I use a lot of time running automation runbooks on schedules to look for these changes. Auditing of any change in the portal would be great, then we would be empowered to alert on specific conditions.

    45 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  OMS Gateway  ·  Flag idea as inappropriate…  ·  Admin →
  3. Custom Logs should include a File "name" or "path" property to indicate where it came from

    Similar to 'SourceSystem,' this could be called 'SourceFile' or 'SourcePath.' This field, which should be searchable, contains the full path of the collected log as the value.

    The existing field 'Type' does not suffice for this purpose- it doesn't scale well when defining custom logs with a wildcard. One 'Type' can have many individual logs. Without a searchable 'SourceFile' property, you wouldn't know where the logs came from, exactly.

    44 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  4. Recursive Log Collection paths

    Recursive Log collection paths for Custom Logs

    This will help users like me with folders that have logs + subfolders with logs.

    42 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  5. Allow me to remove managed systems (Management Groups and Directly Connected Servers/Agents) from Usage page

    Implements a feature to remove managed ( Management Groups and to Directly Connected Servers ) Overview Usage from want? I think even if servers Connected Directly, the agent is uninstalled, cannot be removed from Operational Insights Usage. Cannot disconnect in the SCOM Management Groups are for the Operational Insights on want to remove.

    41 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)

    In the current implementation, Management groups CAN already be removed, but only once they are ‘stale’ == have not reported ANY data for >14days, the link to remove will appear.

    The number of Directly reporting agents in ‘settings’ page is the actual number of servers registered, but the drill down will take you to search (where servers presence is inferred from the data).

    We will be working on options to de-register directly connected servers, similarly to we offer for SCOM management groups.

  6. RDS infratruture monitoring

    Hi Team, could we add monitoring for RDS infrastructure into MOMS ? ie. user logged on, user client IP, client IP latency , Client App latency etc.

    41 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  7. 39 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  8. Allow for performance data to be monitored by the VMware solution

    Add the possibility to monitor performance data as well in VMware environments, both for the hosts and for the VM´s.

    Examples for what I would want to look at with the solution;
    * Are there any snapshots? If so, what´s the size and age of these?
    * Show information about the datastores connected, both the size and usage details (free space, used space etc.)
    * Host CPU and memory utilization
    * VM CPU and memory utilization

    39 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  9. Support the import of complex JSON objects

    Just discovered it's not possible to import complex JSON objects, even objects with an array of strings fails. Please allow for the ability to import complex JSON objects!

    39 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
  10. Support a service tag which denotes the IP address space for Log Analytics

    Currently, we don't support a service tag which denotes the IP address space for Azure Log Analytics service. There are scenarios where a customer would like to allow only the outbound traffic to the Log Analytics service by using NSG. Such customers are requires to whitelist all IP addresses of Azure datacenter. However the customers need to update the settings of NSG every week because there's a possibility that the Azure IP ranges are changed once a week. This requires complicated procedures and high-maintenance. So, it would be great if the service tag for the Log Analytics service is supported…

    37 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. Dynamics 365 Analytics

    I'd like to be able to analyse metrics from my 'Dynamics 365 for Operations' deployments (Prod and Sandboxes), much like you can O365 Analytics solution ...please :)

    ...I imagine this would appeal to CRM peeps too.

    Cheers,

    Thad

    37 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  12. Target Solution packs to group of computers/data centers

    I don't want to use ALL solution packs on ALL onboarded servers. At the moment the only workaround is to create workspaces by solution pack and maintain your server list by solution packs.

    1) While Adding a Solution; optionally specify groups to target. (e.g. All; only this group members or All groups except members of this group)
    2) Track data/$$ by solution pack and by servers/user defined groups. This can be used to Alert when a SP or computer/group consumes more than expected-->trigger runbook to unload SP on the server.
    3) Configure data flow by restricting (Servers; solutions;group of servers;…

    37 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  13. OMS Agent should not consume excessive CPU/memory space

    The OMS Agent for Linux takes up a large amount of CPU/memory space, which causes issues when running on Kubernetes clusters. Azure Security Center automatically installs the OMS Agent on all VMs, and users are frustrated by having to uninstall it in order to regain the CPU/memory space. The OMS Agent should not take up an overly large amount of CPU/memory space.

    37 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  14. Power BI dataset in PBI desktop

    The PowerBI dataset that OMS creates via the PowerBI OMS export is apparently ONLY available in the PowerBI service (the website). We can't access with PowerBI Desktop, therefore we can't create datamodel or create measurements for the OMS exported dataset. This makes the excel connection completely useless.

    36 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  15. Consolidate OMS Agent and ServiceMap Agent

    Can we get a single agent for this solution? We are getting a lot of push-back on having two install two agents to get this functionality.

    36 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Service Map  ·  Flag idea as inappropriate…  ·  Admin →

    This is something we are actively working on. Note that the two agents will likely never be fully consolidated into a single executable. What we are going to do is make it easier to manage the Dependency Agent so that in most cases, it’s not a separate manual install.

  16. Analyse logs from App Service in the OMS portal

    Hello,

    I would like to Analyse logs from an App Service in the OMS portal, right now it's posible to save those logs in a storage account but this one can't be linked to the Log Analytics for an analysis in the OMS portal.

    36 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  OMS Gateway  ·  Flag idea as inappropriate…  ·  Admin →
  17. HTTP / PowerShell Capability to Regenerate Primary and Secondary OMS Keys

    Currently the OMS Portal has the capability to regenerate the OMS primary and secondary keys. This must be a manual step. This is quite dangerous as the URL is open to the Internet - if anyone gets to know either key then they can do a HTTP POST into our OMS workspace. We need to be able to regenerate these over HTTP or PowerShell.

    There isn't any option of regenerating via the Azure Portal and I can't find any API that might allow this to be done. The only closest match I found is the 2015-11-01-preview API which is now…

    36 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
  18. Building tiles and views based on saved Analytics queries

    At the Moment we have to design a query in Analytics Portal, saving it for later re-use and then copying the query into View designer to visualize the result.
    It would be really helpful to be able to base views on saved queries. Instead of pasting the query it would be helpful to simply select a saved query. If then someone Edits the query the visualization gets automatically updated.

    36 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    under review  ·  1 comment  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
  19. Add Resource Group Tags to Power BI Azure Consumption

    Add another table to Power BI Azure Consumption to allow relating resource usage costs to tags defined at the Resource Group level.

    Each record This table would have a resource group. Each column would be the tag name. See suggested layout, attached.

    This allows the tag hierarchy / inheritance which so many others have asked for in other feedback requests.

    35 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  20. Please DO NOT RETIRE the demo site: https://portal.loganalytics.io/demo#/query/main

    For log analytics, there is a demo site: https://portal.loganalytics.io/demo#/query/main, which is very useful for testing purpose since it has a lot of data.

    And now I see it will be retired on September 2nd, 2019, please keep it alive.

    35 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  • Don't see your idea?

Feedback and Knowledge Base