Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

How can we improve Azure Log Analytics ?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Bring back the On-Prem AD Replication Status Tool

    Version 1.0 is expired. The download page for version 1.1 only allows us to download the expired 1.0 version. The "cloud" version in OMS doesn't satisfy all of the same needs as the original version did. This was a very handy tool and I'd like to have it back.

    Cross-post from: https://windowsserver.uservoice.com/forums/304621-active-directory/suggestions/11701692-bring-back-the-on-prem-ad-replication-status-tool

    762 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      70 comments  ·  AD Replication Result Solution  ·  Flag idea as inappropriate…  ·  Admin →
    • Service Map support on Ubuntu

      Ability to install the Dependency Agent on Ubuntu

      501 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        completed  ·  1 comment  ·  Service Map  ·  Flag idea as inappropriate…  ·  Admin →
      • iOS Mobile App

        Provide iOS Mobile application to access Operational Insights from iPhone and/or iPad

        436 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          4 comments  ·  Mobile App  ·  Flag idea as inappropriate…  ·  Admin →
        • Android Mobile App

          Provide Android Mobile application to access Operational Insights

          435 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            7 comments  ·  Mobile App  ·  Flag idea as inappropriate…  ·  Admin →
          • Add support for autorefresh dashboards and session never expire.

            Add support for automatic refresh/session never expore.
            Autorefresh each x seconds on dashboards and main overview Dashboard.

            This will solve the problem when using OMS dashboards as operationcenter with monitors. The sessions expires to often and the content do not autorefresh.

            415 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              12 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
            • Access read only Dashboard directly from URL

              Maybe IT can be (partially) achieved by RBAC but we would like to have the possibility to access a read-only version of the dashboard just bij entering a URL. The dashboard should not have a timeout. this way we can put the dashboard on a big screen (and when the possibility of multiple dashboard is enabled) we kan put multiple big screens on our service desk.

              Access to this dashboard should be restricted by IP address and/or an URL or something like this.

              310 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                10 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
              • Open up the capacity management pack for other systems/counters without VMM

                Would be great to be able to do some capacity planning on other counters or systems (sql dabatabase, scsm, scom orchestrator). You have a great engine in the backend so please utilize it fully. for example: would be great to be able to import other SCOM data like SQL perf counters so I can do capacity planning on my SQL servers. Or to be able to do capacity planning on physical hosts that are not managed by VMM.

                219 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  12 comments  ·  Capacity Management Solution  ·  Flag idea as inappropriate…  ·  Admin →
                • Collect Custom Windows Performance Counters

                  Allow a custom / user-defined policy of which Windows Performance Counters to collect from agents and use in search.

                  191 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                  • Collect text log files

                    Allow for the ability to collect text log files.

                    For agent-based collection, it could initially be limited to text log files that are "known" to SCOM through MPs (i.e. SQL Server's ERRORLOG) or with path to the file configurable by the user (from the portal or thru an Authoring Template).

                    For collection from a storage account (if you have a way to land the file there on your own) you would have to point at the blob\container.

                    Note: This Idea was re-created after having been incorrectly merged.

                    167 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                    • Need the ability to filter security events before they're collected

                      The security SP badly needs:
                      - security log filtering so that only specific scenarios can be consolidated to the cloud. Mind don't assume they're connected through OpsMgr, since OpInsights lacks any multitenancy, security scenarios are the first that would need separate workspaces to limit access to the data
                      - there are some common scenarios that need to be addressed on the collected data, for example there should be an easy way to discard logons by computer accounts (account ending with $).
                      - princing for Security IP risks to put OpInsights out of play, it's way too expensive, a single DC…

                      166 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        13 comments  ·  Security and Audit Solution  ·  Flag idea as inappropriate…  ·  Admin →

                        Thank you for you patience,
                        Based on your feedback we have completed the work to enable FILTER security events before collection.
                        Here is the blog post on this:
                        https://blogs.technet.microsoft.com/msoms/2016/11/08/filter-the-security-events-the-oms-security-collects/

                        We are working on Solution Targeting feature which will provide you ability to select scope of the computers per each solution. Please expect the public preview later on this year.
                        Thanks,
                        —Tigran

                      • Real Time Service Change Tracking

                        Currently with change tracking only polling every hour, if a service stops and restarts before that next hour poll there would be no indication of it happening and therefor no accurate alerting. Ideally for example I would like a real time alert for a service stopping with an action to restart the service.

                        154 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          8 comments  ·  Change Tracking Solution  ·  Flag idea as inappropriate…  ·  Admin →
                        • Allow to create multiple Dashboards

                          Need option to create more custom Dashboards. Within a Dashboard we need option to segregate tiles into different custom categories\Headings like all tiles of IIS into one area of Dashboard and all SQL into another.

                          145 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            0 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
                          • Organizational Account sign in Support for Windows Phone Mobile app

                            Provide support for Organizational Account sign in from Windows Phone Mobile app.

                            137 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              9 comments  ·  Mobile App  ·  Flag idea as inappropriate…  ·  Admin →
                            • Security event logs should be collected

                              Security audits should be collected by Advisor. Proper intellignece should be added to query for specific info contained in properties. Some sort of normalization (like ACS does) is welcome / needed.
                              Proper reporting is needed as well.

                              125 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                              • Google Chrome could not display OMS Console

                                I tried to hear infomation from my friend.
                                Google Chrome 32bit and 64bit could not display OMS Console.
                                But, IE, Edge and Firefox could display OMS Console.

                                See, my blog(Sorry, my blog in Japanese).
                                http://sshzk.blogspot.com/2016/01/google-chromemicrosoft-operations.html

                                118 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  6 comments  ·  Browser Support  ·  Flag idea as inappropriate…  ·  Admin →
                                • Please dump all use of Silverlight. It crashes regularly on Macs when viewing the event listing. Thank you!

                                  Really guys, Silverlight has no place in an enterprise-grade product. I thought this was supposed to be 100% HTML5?

                                  116 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    completed  ·  6 comments  ·  Browser Support  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Collect performance metrics for UNIX and Linux Servers

                                    All us to view performance data for Unix/Linux servers monitored by SCOM using the System Center Advisor.

                                    108 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                    • Restrict user access

                                      I want to grant a general user access to Log Search and My Dashboard only. I want to be the administrator of the environment and setup the dashboards for them, but I do not want them to be able to browse all solutions, or be able to add/remove solutions, or make any changes to the dashboards. If things need added/removed/modified then those requests should be funneled to me, the admin.

                                      I'm also interested in displaying the My Dashboard solution on a big screen as suggested in:

                                      https://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6984082-access-read-only-dashboard-directly-from-url

                                      106 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        4 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Programmatically submit Search requests and receive matching results

                                        Ability to programmatically access Advisor (e.g. using PowerShell script) to submit Search requests and get receive matching result set from the Advisor service.

                                        [Edited during forum migration October 2014 - the previous comment were mostly asking for REST API, but a set of Powershell cmdlets wrapping the API was also considered convenient by many]

                                        91 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          4 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Support wildcards for field values in search

                                          Being able to use naming convention in criteria would be very useful, i.e. Computer="SRV0*". Having to enter exact names makes exploration less versatile.

                                          91 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            5 comments  ·  Search UI and Language  ·  Flag idea as inappropriate…  ·  Admin →

                                            You can now do wildcard searches.

                                            e.g.
                                            Computer=svel*
                                            Type=WireData RemoteIP:172?16*
                                            Type:Perf CounterName=Processor

                                            A couple of things to note:

                                            • Do not enclose the value in quotes – it will look for * as the actual value to match
                                            • For strings with . in them, use the ? to match (. is not currently a valid character in non-quoted string literals)
                                            • Use ? to match spaces in strings
                                          ← Previous 1 3 4 5 19 20
                                          • Don't see your idea?

                                          Feedback and Knowledge Base