Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

How can we improve Azure Log Analytics ?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Save container labels in ContainerLog entries, and allow querying by them in Log Analytics

    The docker logging system allows labels and/or tags to be added to the log output, depending on the logging driver in use; see https://docs.docker.com/config/containers/logging/configure/#use-environment-variables-or-labels-with-logging-drivers for example.

    When a container's logs are picked up by the OMS Agent and forwarded to Container Monitoring as part of Log Analytics, It would be useful if these labels/tags could be saved as part of each log entry.
    Also, it would be useful if log queries could be filtered according to these labels/tags, for example something like this:
    ContainerLog
    | where Labels.environment == "production" and Labels.nodetype = "worker"

    1 vote
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Flag idea as inappropriate…  ·  Admin →
    • Can't create alerts based on cross-resource queries

      It used to be possible through the OMS portal to link an Application Insights instance to Log Analytics. Since the portal is being depreciated, along with the App Insights connector, we are forced to use cross-resource queries to query an App Insights instance from a separate Log Analytics instance. This works fine for general queries, but we cannot create alerts based on cross-resource queries. The alert will not create because of a "syntax error", when the same query works in Log Analytics.

      There should be a way to ingest App Insights data into a Log Analytics instance. Or else we…

      41 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        1 comment  ·  Alert Management Solution  ·  Flag idea as inappropriate…  ·  Admin →
      • Do not sunset the OMS mobile until the Azure mobile can display dashboards and chart information.

        Do not sunset the OMS mobile app until the Azure mobile app can effectively replace the functionality. The current Azure mobile application cannot display any dashboards (including Azure dashboards) nor can it display log analytics or application insights queries. This functionality is currently only available in the OMS mobile app!

        159 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          14 comments  ·  Mobile App  ·  Flag idea as inappropriate…  ·  Admin →

          We are actively seeking for feedback in this area, as this is non trivial decision for us. Based on the user voice, there seems to be some passionate supporters for this capability, yet, the number of users actively using the app remains very low. Would love to hear ideas on how to reconcile this:
          1. is it just a great demo feature?
          2. Which one of the features users are using – dashboards vs. search vs. alerts?
          3. Could something like PowerBI be a viable alternative? If not – what’s missing?

        • Create the cmdlet to fetch our OMS alert or alert rule to easly maintenance, due Get-AzureRmAlertRule do not support this feature today.

          Add support to get-azurermalertrule to handle the OMS Alert and alert rule to maintenance, clone, delete, etc. Due actually is not supported, if you need it required to work on Alert API.

          35 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  Alert Management Solution  ·  Flag idea as inappropriate…  ·  Admin →
          • SQL Assessment performance tempdb

            Priority Performance recommendation to "Configure the tempdb database to reduce page allocation contention" reporting incorrectly for SQL 2017 instance. Trace flag -T1118 is obsolete and has no effect in SQL 2017 per MS white paper.

            2 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              1 comment  ·  SQL Assessment Solution  ·  Flag idea as inappropriate…  ·  Admin →
            • Can I monitor process on Linux?

              Linux Agent can not monitor process other than custom log.
              When is process monitoring installed as a standard function?
              Customer wants to use it.
              Because customer need to take cost for using Custom Log.
              Now, customer redirects result of ps command to Custom log file.
              They want to stop these operation.

              1 vote
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
              • Want VM inventory in Automation to collect SQL server edition

                May I have a request about the enhancement to the information reported on by Log Analytics in the VM inventory? Because currently it doesn’t include the SQL server edition. Thanks a lot !

                1 vote
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                • Sum durations in SQL Analytics Query page

                  Please add sum duration column to the queries table on Query durations page in SQL Analytics solution. Please see the attached screenshot. Thx

                  3 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                  • Bug: OMS Gateway.msi - product id number not same after install (registery)

                    hi,
                    i just tried to install the OMS Gateway.msi with the package dsc resource, unfortunately it installs not correct. Although it does install the oms gateway. issue is, by installatation it checks on ProductCode : 5225CCB2-878D-4D3E-8EF3-E9ED963556B7 .

                    BUT after installation , it registers with a different productcode CC7658E2-7EB2-44D1-97C0-D0048717F6A9 .
                    for now i fixed it for my dsc configuration, might be a minor to look into

                    1 vote
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  OMS Gateway  ·  Flag idea as inappropriate…  ·  Admin →
                    • Bring back the capacity and performance Solution Pack

                      Please bring back the Capacity and Performance Solution Pack

                      3 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  Capacity Management Solution  ·  Flag idea as inappropriate…  ·  Admin →
                      • ServiceNow User App for Microsoft OMS integration support for ServiceNow London release

                        We want to integrate our ServiceNow London release instance with the OMS ITSM solution.

                        Currently the ServiceNow User App for Microsoft OMS integration is only supported till ServiceNow Kingston release. We also want to have some clarification how often the app will be updated oin the future to follow the ServiceNow release schedule.

                        3 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                        • When pinning an Analytics query to a dashboard, you should be able to set a refresh rate

                          In Azure Log Analytics, you can write a custom query and then pin it to a dashboard. But the data presented cannot be configured to refresh regularly. The data is set to refresh once an hour, which might as well be no refresh at all. The rate should be set to something similar to Live Tile refresh rates, or directly configurable so that dashboards will present Analytics data that is not stale.

                          15 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            0 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
                          • Network Performance Monitor-Express Route

                            Hi,

                            I've been looking for an option where we can get total upload/download (data in-out) utilization reports either with NPM dashboard or with Log Analytics query by date range. Unfortunately I did not find any.

                            It would be great if you can provide Log analytic query on NPM dashboard. Currently there is no option available to view total utilization reports for Azure ER.

                            3 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Network Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
                            • Upgrade Readiness cannot select multiple versions?

                              Customer has a many Windows 10 Verstions (e.g. 1607 and 1803).
                              But Upgrade Readiness configuration can select only one version in coufiguration.
                              Customer thinks creating more workspace for using another Windows 10 version, but it is very cost for customer.
                              And in the future, target Windows 10 clients are increasing.
                              At every time Windows 10 client increasing, customer has more cost to create another workspace.

                              1 vote
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                              • More Useful tiles in View Designer

                                Please, add more view dashboards to be used inside View Designer or allow us to use create/customize them in a HTML-ish way. Displaying data with multiple columns as a table is a nightmare, espacially if you don't have a number/timestamp column, but that's the most required data; content is unreadable.

                                1 vote
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  Search UI and Language  ·  Flag idea as inappropriate…  ·  Admin →
                                • Ability to ingest CSV and TSV files

                                  Multiple internal and external tools export their output to csv files. It could be great to have the ability to ingest them to Log Analytics without building some new infrastructure for it

                                  3 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  Extensibility  ·  Flag idea as inappropriate…  ·  Admin →
                                  • resolved

                                    Ability to have an emailed alert when original issue has been resolved.

                                    Example, I have Log Analytics configured to send an emailed alert when a specific Windows Server service enters the stopped state. This sends an alert. I'd like to be able to configure Log Analytics to automatically send a second email when that service enters the started state.

                                    3 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  Alert Management Solution  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Support a service tag which denotes the IP address space for Log Analytics

                                      Currently, we don't support a service tag which denotes the IP address space for Azure Log Analytics service. There are scenarios where a customer would like to allow only the outbound traffic to the Log Analytics service by using NSG. Such customers are requires to whitelist all IP addresses of Azure datacenter. However the customers need to update the settings of NSG every week because there's a possibility that the Azure IP ranges are changed once a week. This requires complicated procedures and high-maintenance. So, it would be great if the service tag for the Log Analytics service is supported…

                                      26 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        1 comment  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Office Add-in Architecture visible via Upgrade Readiness Solution

                                        The Upgrade Readiness Solution shows detail on the Office Addins in your environment. Having the ability to determine which Plugins required attention when moving from 32bit Office to 64bit would be useful and therfore knowing if a plugin is 32bit or 64bit would assist this process.

                                        4 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                        • Custom Logs should include a File "name" or "path" property to indicate where it came from

                                          Similar to 'SourceSystem,' this could be called 'SourceFile' or 'SourcePath.' This field, which should be searchable, contains the full path of the collected log as the value.

                                          The existing field 'Type' does not suffice for this purpose- it doesn't scale well when defining custom logs with a wildcard. One 'Type' can have many individual logs. Without a searchable 'SourceFile' property, you wouldn't know where the logs came from, exactly.

                                          12 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                          ← Previous 1 3 4 5 37 38
                                          • Don't see your idea?

                                          Feedback and Knowledge Base