Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

How can we improve Azure Log Analytics ?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Request to add BMC Remedy partner type in ITSM Connection

    Hi Team,

    Could you please add BMC Remedy partner type in ITSM connection in LogicApps as this connection is not available which is commonly used tool in most of the software companies.
    Adding this connector will help us to automatically creates remedy tickets whenever there is a failure in ADF or if any component reaches threshold limits

    67 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)

    Thanks for the valid suggestion. Your feedback is now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

  2. Collect Log Analytics Logs by vNet not through internet.

    We would like to collect logs without going through the internet.
    We need to be able to connect some URLs on the Azure Datacenter via the Internet.
    Communication is encrypted and URLs are fixed, but important data such as security logs are sent, so it is more secure if we can collect it simply by connecting to vNet.
    If this feature is implemented, we can collect more important data such a customer data and audit information.

    28 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)

    Thanks for the valid suggestion. Your feedback is now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

  3. Log Analytics - Alert rule does not work if the table is not yet created

    We want to create an alert rule on the non-existent table(yet), this is because we are sending the PSCustomObject to the custom table from the automation job, once the problem occurs, the initial table will be created with the results. We want to pre-recreate this rule, workaround, for now, is to generate the table with some custom data. Can this be fixed please?

    20 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for the valid suggestion. Your feedback is now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

  4. Do not sunset the OMS mobile until the Azure mobile can display dashboards and chart information.

    Do not sunset the OMS mobile app until the Azure mobile app can effectively replace the functionality. The current Azure mobile application cannot display any dashboards (including Azure dashboards) nor can it display log analytics or application insights queries. This functionality is currently only available in the OMS mobile app!

    181 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    14 comments  ·  Mobile App  ·  Flag idea as inappropriate…  ·  Admin →

    We are actively seeking for feedback in this area, as this is non trivial decision for us. Based on the user voice, there seems to be some passionate supporters for this capability, yet, the number of users actively using the app remains very low. Would love to hear ideas on how to reconcile this:
    1. is it just a great demo feature?
    2. Which one of the features users are using – dashboards vs. search vs. alerts?
    3. Could something like PowerBI be a viable alternative? If not – what’s missing?

  5. Add wildcard character feature for folder in Custom log path

    introduce this wildcard character feature in log path future.
    For example
    C://test/*/log/*.log

    17 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for the valid suggestion. Your feedback is now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

  6. DCR: powershell cmdlet to collect activity log across subscription in Log analytics workspace

    We have activity log solution here: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/collect-activity-logs
    cx want to do the below steps by powershell command:
    - Configure activity logs to go to your Log Analytics workspace.
    - In the Azure portal, select your workspace and then click Azure Activity log.
    - For each subscription, click the subscription name.

    Currently we don't have any powershell commands to do the same, as I know, we have some powershell command to enable custom logs in log analytics, hence please also provide similar command to connect activity logs in workspace across subscription.

    27 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  7. Provide ability to query resource Graph data from Log Analytics

    Please provide option to query resource graph data from Log Analytics. That will allow to correlate data between those and some interesting scenarios will be possible. Also you should be able to use Log Analytics query that reaches resource graph and you can create Log Search alert.

    47 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Extensibility  ·  Flag idea as inappropriate…  ·  Admin →
  8. Send logs for all Office 365 audit log entries/schemas

    Currently O365 logs are only collected for AzureActiveDirectory, Exchange, SharePoint and OneDrive workloads. Please add support for other audit log schemas as well, eg. the ones that are exposed via Office 365 Management Activity API: Teams, PowerBI, Sway, Yammer, ...

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  9. Network Performance Monitor : custom network test has a test frequency of min 5 minutes

    Network Performance Monitor - Configuration - Service Connectivity Monitor. The custom network test has a test frequency of min 5 minutes. 5 minute intervals to check an endpoint is too long, its also too long to graph out trends or analyses in troubleshooting. 1 minute intervals will be needed. This is the only thing preventing my clients from using this solution for network monitoring.

    20 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Network Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
  10. Send alerts with resolved state for log alert rules

    Related with: https://feedback.azure.com/forums/267889-log-analytics/suggestions/12898992-activated-resolved-states-for-alerts-with-auto-res

    The documentation says:

    Log alert rules comprise of custom query-based logic provided by users and hence without a resolved state. Due to which every time the conditions specified in the log alert rule are met, it is fired.

    It would be nice if there were a possibility that if the alert is fired, and the next time the query is executed it does not satisfy the condition to be fired again, then a resolved alert could be sent.

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for the valid suggestion. Your feedback is now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

  11. Recursive Log Collection paths

    Recursive Log collection paths for Custom Logs

    This will help users like me with folders that have logs + subfolders with logs.

    39 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  12. Can't create alerts based on cross-resource queries

    It used to be possible through the OMS portal to link an Application Insights instance to Log Analytics. Since the portal is being depreciated, along with the App Insights connector, we are forced to use cross-resource queries to query an App Insights instance from a separate Log Analytics instance. This works fine for general queries, but we cannot create alerts based on cross-resource queries. The alert will not create because of a "syntax error", when the same query works in Log Analytics.

    There should be a way to ingest App Insights data into a Log Analytics instance. Or else we…

    44 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Alert Management Solution  ·  Flag idea as inappropriate…  ·  Admin →
  13. Allow user to define the sample data set for Custom Field mapping with FastExtract

    Log Analytics provides for modeling custom fields in custom logs using FastExtract.

    The mapping tool limits the user to the top 100 log entries when doing the modeling of custom fields. This can be seen in the interface when doing a field extract by clicking the "hide tips" link in the right hand side. The tips scroll away revealing the Condition section which indicates a "take 100" limit.

    I've struggled to create fields that contain all possible values for a field or column in my custom logs due to this arbitrary limit.

    A much more useful implementation would be to…

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  14. Color customization in log analytics chart

    A feature to customize the color of the charts should be available, as the default colors don't make any sense in many scenarios (green, blue, etc). Furthermore, when publishing the charts into a dashboard, the colors and chart shape are changed again (from pie to donut and from green and blue to dark blue and light blue).
    The ability to choose the colors should be added to the "render" method and consistency between the actual chart in log analytics and the published chart in the dashboard are very important features that should be available.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)

    Thanks for the valid suggestion. Your feedback is now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

  15. We should be able to customize the email body of the email notification generated by Alerts.

    So, Alerts will be sending default emails.. we should be able to generate the customized email with the search results.

    23 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Alert Management Solution  ·  Flag idea as inappropriate…  ·  Admin →
  16. Log Analytics - allow configuring different data collection settings per connected machine\agent in the same workspace

    for example: in a scenario where two windows machines are connected to the same log analytics workspace, provide the option to ingest windows performance counters data to the workspace only for the first machine (when both machines connected to the same log analytics workspace)

    This feature will be very useful when a customer needs to use a single workspace for different use cases, but willing to keep all the data in a single location, while preventing unnecessary data ingestion which will result in additional costs.

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  17. Create the cmdlet to fetch our OMS alert or alert rule to easly maintenance, due Get-AzureRmAlertRule do not support this feature today.

    Add support to get-azurermalertrule to handle the OMS Alert and alert rule to maintenance, clone, delete, etc. Due actually is not supported, if you need it required to work on Alert API.

    24 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Alert Management Solution  ·  Flag idea as inappropriate…  ·  Admin →
  18. Flexible Custom Logs Record Delimiter

    The current functionality of setting a record delimiter of either
    a) end of line
    b) only one of 6 pre-chosen timestamps
    Is actually very limiting, even if there was a custom timestamp format option.

    When dealing with vendor applications or teams with different logging format standards this will still mean having to revert to option a. Logging every line after a return character, which if you have stack traces is going to get painful.

    If Log Analytics is serious about competing in this space it would be great to have some functionality where a log format is an option. Something…

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for the valid suggestion. Your feedback is now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

  19. Microsoft Teams integration with Azure Log Analytics

    How to integrate, connect Microsoft Teams to Azure Log Analytics? and send Microsoft Teams logs to Azure Log Analytics

    21 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  20. Add ability to query pipeline run history from an activity in a pipeline

    I want to have an activity that checks to see if a named pipeline is currently running and act accordingly (e.g. wait a minute and re-check)

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for the valid suggestion. Your feedback is now open for the user community to upvote & comment on. This allows us to effectively prioritize your request against our existing feature backlog and also gives us insight into the potential impact of implementing the suggested feature.

← Previous 1 3 4 5 43 44
  • Don't see your idea?

Feedback and Knowledge Base