Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

How can we improve Azure Log Analytics ?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Bring back the On-Prem AD Replication Status Tool

    Version 1.0 is expired. The download page for version 1.1 only allows us to download the expired 1.0 version. The "cloud" version in OMS doesn't satisfy all of the same needs as the original version did. This was a very handy tool and I'd like to have it back.

    Cross-post from: https://windowsserver.uservoice.com/forums/304621-active-directory/suggestions/11701692-bring-back-the-on-prem-ad-replication-status-tool

    762 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    70 comments  ·  AD Replication Result Solution  ·  Flag idea as inappropriate…  ·  Admin →
  2. Service Map support on Ubuntu

    Ability to install the Dependency Agent on Ubuntu

    501 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  1 comment  ·  Service Map  ·  Flag idea as inappropriate…  ·  Admin →
  3. iOS Mobile App

    Provide iOS Mobile application to access Operational Insights from iPhone and/or iPad

    436 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Mobile App  ·  Flag idea as inappropriate…  ·  Admin →
  4. Android Mobile App

    Provide Android Mobile application to access Operational Insights

    435 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    7 comments  ·  Mobile App  ·  Flag idea as inappropriate…  ·  Admin →
  5. Add support for autorefresh dashboards and session never expire.

    Add support for automatic refresh/session never expore.
    Autorefresh each x seconds on dashboards and main overview Dashboard.

    This will solve the problem when using OMS dashboards as operationcenter with monitors. The sessions expires to often and the content do not autorefresh.

    415 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    12 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
  6. Access read only Dashboard directly from URL

    Maybe IT can be (partially) achieved by RBAC but we would like to have the possibility to access a read-only version of the dashboard just bij entering a URL. The dashboard should not have a timeout. this way we can put the dashboard on a big screen (and when the possibility of multiple dashboard is enabled) we kan put multiple big screens on our service desk.

    Access to this dashboard should be restricted by IP address and/or an URL or something like this.

    310 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    10 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
  7. Open up the capacity management pack for other systems/counters without VMM

    Would be great to be able to do some capacity planning on other counters or systems (sql dabatabase, scsm, scom orchestrator). You have a great engine in the backend so please utilize it fully. for example: would be great to be able to import other SCOM data like SQL perf counters so I can do capacity planning on my SQL servers. Or to be able to do capacity planning on physical hosts that are not managed by VMM.

    219 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    12 comments  ·  Capacity Management Solution  ·  Flag idea as inappropriate…  ·  Admin →
  8. Collect Custom Windows Performance Counters

    Allow a custom / user-defined policy of which Windows Performance Counters to collect from agents and use in search.

    191 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  9. Collect text log files

    Allow for the ability to collect text log files.

    For agent-based collection, it could initially be limited to text log files that are "known" to SCOM through MPs (i.e. SQL Server's ERRORLOG) or with path to the file configurable by the user (from the portal or thru an Authoring Template).

    For collection from a storage account (if you have a way to land the file there on your own) you would have to point at the blob\container.

    Note: This Idea was re-created after having been incorrectly merged.

    167 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  10. Need the ability to filter security events before they're collected

    The security SP badly needs:
    - security log filtering so that only specific scenarios can be consolidated to the cloud. Mind don't assume they're connected through OpsMgr, since OpInsights lacks any multitenancy, security scenarios are the first that would need separate workspaces to limit access to the data
    - there are some common scenarios that need to be addressed on the collected data, for example there should be an easy way to discard logons by computer accounts (account ending with $).
    - princing for Security IP risks to put OpInsights out of play, it's way too expensive, a single DC…

    166 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    13 comments  ·  Security and Audit Solution  ·  Flag idea as inappropriate…  ·  Admin →

    Thank you for you patience,
    Based on your feedback we have completed the work to enable FILTER security events before collection.
    Here is the blog post on this:
    https://blogs.technet.microsoft.com/msoms/2016/11/08/filter-the-security-events-the-oms-security-collects/

    We are working on Solution Targeting feature which will provide you ability to select scope of the computers per each solution. Please expect the public preview later on this year.
    Thanks,
    —Tigran

  11. Real Time Service Change Tracking

    Currently with change tracking only polling every hour, if a service stops and restarts before that next hour poll there would be no indication of it happening and therefor no accurate alerting. Ideally for example I would like a real time alert for a service stopping with an action to restart the service.

    154 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    8 comments  ·  Change Tracking Solution  ·  Flag idea as inappropriate…  ·  Admin →
  12. Allow to create multiple Dashboards

    Need option to create more custom Dashboards. Within a Dashboard we need option to segregate tiles into different custom categories\Headings like all tiles of IIS into one area of Dashboard and all SQL into another.

    145 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
  13. Organizational Account sign in Support for Windows Phone Mobile app

    Provide support for Organizational Account sign in from Windows Phone Mobile app.

    137 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Mobile App  ·  Flag idea as inappropriate…  ·  Admin →
  14. Security event logs should be collected

    Security audits should be collected by Advisor. Proper intellignece should be added to query for specific info contained in properties. Some sort of normalization (like ACS does) is welcome / needed.
    Proper reporting is needed as well.

    125 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  15. Google Chrome could not display OMS Console

    I tried to hear infomation from my friend.
    Google Chrome 32bit and 64bit could not display OMS Console.
    But, IE, Edge and Firefox could display OMS Console.

    See, my blog(Sorry, my blog in Japanese).
    http://sshzk.blogspot.com/2016/01/google-chromemicrosoft-operations.html

    118 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    6 comments  ·  Browser Support  ·  Flag idea as inappropriate…  ·  Admin →
  16. Please dump all use of Silverlight. It crashes regularly on Macs when viewing the event listing. Thank you!

    Really guys, Silverlight has no place in an enterprise-grade product. I thought this was supposed to be 100% HTML5?

    116 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  6 comments  ·  Browser Support  ·  Flag idea as inappropriate…  ·  Admin →
  17. Collect performance metrics for UNIX and Linux Servers

    All us to view performance data for Unix/Linux servers monitored by SCOM using the System Center Advisor.

    108 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
  18. Restrict user access

    I want to grant a general user access to Log Search and My Dashboard only. I want to be the administrator of the environment and setup the dashboards for them, but I do not want them to be able to browse all solutions, or be able to add/remove solutions, or make any changes to the dashboards. If things need added/removed/modified then those requests should be funneled to me, the admin.

    I'm also interested in displaying the My Dashboard solution on a big screen as suggested in:

    https://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6984082-access-read-only-dashboard-directly-from-url

    106 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  My Dashboard  ·  Flag idea as inappropriate…  ·  Admin →
  19. Programmatically submit Search requests and receive matching results

    Ability to programmatically access Advisor (e.g. using PowerShell script) to submit Search requests and get receive matching result set from the Advisor service.

    [Edited during forum migration October 2014 - the previous comment were mostly asking for REST API, but a set of Powershell cmdlets wrapping the API was also considered convenient by many]

    91 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
  20. Support wildcards for field values in search

    Being able to use naming convention in criteria would be very useful, i.e. Computer="SRV0*". Having to enter exact names makes exploration less versatile.

    91 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: oidc
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Search UI and Language  ·  Flag idea as inappropriate…  ·  Admin →

    You can now do wildcard searches.

    e.g.
    Computer=svel*
    Type=WireData RemoteIP:172?16*
    Type:Perf CounterName=Processor

    A couple of things to note:

    • Do not enclose the value in quotes – it will look for * as the actual value to match
    • For strings with . in them, use the ? to match (. is not currently a valid character in non-quoted string literals)
    • Use ? to match spaces in strings
← Previous 1 3 4 5 19 20
  • Don't see your idea?

Feedback and Knowledge Base