Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

How can we improve Azure Log Analytics ?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Populate ComputerIP field with agent manager Computer IP address

    ComputerIP is populated with the IP Address from which Azure Log Analytics is receiving data. For nodes behind a firewall/proxy or OMS Gateway this mean to have the external IP Address of the proxy.
    ComputerIP must contain IP(s) information collected by the Agent on the computer hosting it to enable Compliance and Security Scenario on the console.
    RemoteIPAddress could be added as the External IP address for proxy based agents or will contains the same address of the ComputerIP for agents not behind a proxy/firewall/Gateway.
    This have a serious impact on compliance in the actual implementation.

    99 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
    • Custom Log feature for log rotate

      Now, Log Analytics can not collect custom log which file is rotated by log rotation.
      But log rotation is necessary for collection log on OS.
      So, for mitigation we cannot unable to turn off log rotation.
      So, I request to add new request about Custom Log for collecting Log Rotation files.

      75 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        under review  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
      • Building tiles and views based on saved Analytics queries

        At the Moment we have to design a query in Analytics Portal, saving it for later re-use and then copying the query into View designer to visualize the result.
        It would be really helpful to be able to base views on saved queries. Instead of pasting the query it would be helpful to simply select a saved query. If then someone Edits the query the visualization gets automatically updated.

        27 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          under review  ·  1 comment  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
        • Ubuntu cannot deploy log analytics connection at Service Fabric Cluster

          According to public document, we cannot deploy to connect between log analytics and Service Fabric with Ubuntu.

          https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-service-fabric-azure-resource-manager

          https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-diagnostics-oms-setup

          ** Please see 'Note' **
          Enablind this experience for Linux cluster is not yet available.

          We want to know the ETA of this feature.

          10 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  Extensibility  ·  Flag idea as inappropriate…  ·  Admin →
          • Add Resource Group Tags to Power BI Azure Consumption

            Add another table to Power BI Azure Consumption to allow relating resource usage costs to tags defined at the Resource Group level.

            Each record This table would have a resource group. Each column would be the tag name. See suggested layout, attached.

            This allows the tag hierarchy / inheritance which so many others have asked for in other feedback requests.

            9 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Flag idea as inappropriate…  ·  Admin →
            • Allow updating Analytics queries for existing dashboard tiles

              Creating a Azure Portal Dashboard tile based on an Analytics Portal query is super easy. But changing the query later on requires to re-create the whole tile.
              There should be a way to click on the tile, modify the query and then cklick on "Save" to simply modifiying the query and updating the Dashboard tile.

              16 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                1 comment  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
              • Add Instance Id to AzureMetrics for multi instance Azure Web App

                We monitor Azure App Service which scaled out to 3 instances. When I query AzureMetrics it is not clear what instance log entry is related to. Instance Id is useful for automation. for example automatically create memory dump for the instance when memory is upper then threshold.

                6 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  1 comment  ·  Flag idea as inappropriate…  ·  Admin →
                • Add a keyboard shortcut to comment / uncomment the current line in the query editor (like CTRL+K in VS)

                  There already is a shortcut that allows to run the query (Shift+Enter), which is great.
                  A shortcut to toggle wheter the current line is a comment or not (by adding / removing "//" at the beginning of the line) would be great and save a lot of time while editing queries / functions.

                  Similar to the shortcut VS or any other IDE: https://blogs.msdn.microsoft.com/zainnab/2010/04/13/comment-and-uncomment-code/

                  13 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Search UI and Language  ·  Flag idea as inappropriate…  ·  Admin →
                  • Delve report

                    I miss the possibility to build some reports in o365 module for Delve

                    for example
                    OfficeActivity
                    | where ( Site_Url == "https://eur.delve.office.com/" )
                    | sort by TimeGenerated desc

                    we are interested to see is Delve a service which is used

                    7 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                    • Duplicate computernames cause issues for performance metrics

                      We have subscriptions that contain identical VM names in different resource groups. For most data events in OMS this is not a problem since they contain the ResourceID/Resourcegroup name.

                      The problem is that for performance metrics no unique information is logged in OMS to distinguish between those VMs. This means for example that when a "Disk full" Alert is triggered from these metrics, there is no way to know from which resource this alert originates.

                      Solution: please add resourceID to performance metrics, or at least the MMA agent ID.

                      17 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                      • Iis

                        Well. I don't know if it's applicable or not. I am using IIS log query. i need to retrieve unused sites for period of time. I cannot see anything else except timegenerated(property)
                        Hopefully there is query do this.

                        4 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                        • Show database connections in Service Map

                          It would be extremely useful to be able to map an IIS worker process making a connection to a particular database rather than just a SQL Server.

                          An example, a web server with 5 (this could easily be 100 )unique and unrelated sites. These sites make connection to different databases, some of which are on a shared sql server and others may be on other shared sql servers. The existing solution will only show a connection to the sql server process, which makes the map less accurate than it could be.

                          Could the databases be presented grouped under the SQL…

                          20 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            2 comments  ·  Service Map  ·  Flag idea as inappropriate…  ·  Admin →
                          • ExpressRoute Monitoring from multiples VNETs from different subscriptions

                            I have a scenario where 8 VNETs, from 8 different subscriptions are connected to a single ER Circuit. Today, NPM needs that I create 8 different OMS Workspaces to be able to monitor each VNET individually. I wish that we could add VNETs from different Subscription in the same OMS Workspace/NPM Solution, and have a single pane to monitor them all.

                            3 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Network Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
                            • Application Data Collection for All Win10 OS.

                              ability to pull application information for all versions of operating system, not just those that are below the target OS level. This could be tied into PowerBI then, to show high-level information about the applications installed. Currently the Data in the OMS portal is only displayed for Operating systems below 1709, therefore we are unable to view app data for a couple thousand devices, that are already upgraded to 1709. An Example of a report we would like to see is attached. (currently pulling from Upgrade Analytics tables)

                              7 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                              • NLog target for OMS data collector API

                                Please implement a NLog target for the OMS data collector API

                                14 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                • Avoid syslog error if file does not exist in OMS Custom Log configuration to Linux VM

                                  When a new custom log is collected, syslog errors are generated on systems where it doesn't exist.
                                  Is it possible to change the OMS agent, to better handle this scenario.
                                  1. It should be possible from the custom logs to state which VM, this should apply to.
                                  2. It should be possible for the OMS agent, to check to if the directory exist or not and not flood our syslog with error. This would be better reported on OMS logs.
                                  E.g. do an ls to check the file, try not to use sudo out right that results in a syslog…

                                  4 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    under review  ·  1 comment  ·  Workspace Settings / Administration  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Add SQL Tests to Service Endpoint Monitor

                                    Enable testing of database availability - similar to SCOM OLEDB capability (https://technet.microsoft.com/en-us/library/hh457575(v=sc.12).aspx) that can make a test connection and even run a test query to validate functionality.

                                    1 vote
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  Network Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Availability Test Integration with Application Insights

                                      Right now App Insights provides availability tests, but they can only hit external facing sites. The Service Endpoint Monitor fills that gap for any internal sites, but the customer now has to manage 2 separate tool configurations. It would be ideal if App Insights would allow OMS nodes as options on the “Test Locations” list, so all URL testing would be configured in the same place and the respective engines would execute them appropriately

                                      1 vote
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        0 comments  ·  Network Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Synthetic Transactions for Office 365

                                        The network reachability tests are a fantastic addition, and taking it even further would be to allow user to specify send/receive account credentials and have the test send actual dummy email, test SPO and OD4B upload/download, Skype check presence, etc. Just a an even deeper test that O365 services are working from one of their nodes

                                        1 vote
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Network Monitoring  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Why is there still no Auto Start-up operation?

                                          Why is there still no Auto Start-up operation?

                                          1 vote
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Change Tracking Solution  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 40 41
                                          • Don't see your idea?

                                          Feedback and Knowledge Base