Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

How can we improve Azure Log Analytics ?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Multi tenancy: Collect Azure Health logs from different Azure tenants

    We manage Azure tenants for multiple companies. We want one central monitoring and automation Workspace to manage all these different tenants.
    Although you can collect data from vm agents in different Azure tenants as well as data from different Office365 tenants it is not possible to get the Azure Health logs from different tenants into one OMS Workspace.

    503 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      4 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
    • Support the import of complex JSON objects

      Just discovered it's not possible to import complex JSON objects, even objects with an array of strings fails. Please allow for the ability to import complex JSON objects!

      39 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        2 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
      • Allow community sharing of Saved Searches

        Enable OMS users to share a saved search into a community search gallery that enables other users to search by category/tags, view a search, and add it to their workspace under a given category.

        Please give additional comments and suggestions below!

        28 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          planned  ·  0 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
        • Reduce the complexity of the Data Collection API authorization header

          Log Analytics' Data Collection API has by far the most confusing and complex authorization method that we've seen so far in the Azure world.

          It seems strange to us that writing to a log with the Data Collector API requires a more complex authorization process than writing to our CosmosDB data stores that are the backbone of our app.

          After a week we still haven't been able to get a node.js server writing a single log entry. DocumentDB took us less than 30 minutes.

          20 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            1 comment  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
          • Make the new API great again!

            The new API with the upgraded workspaces is great, but the result of a HTTP Get to get search results via a URL query results into a 'nested' JSON object, and not a key:value pair like the old API had.

            This makes it impossible to parse for the 3rd party app we are using to work with the results.

            Example old API:

            {
            "SearchResults": {
            "id": "subscriptions\/00000000-0000-0000-0000-000000000000\/resourceGroups\/oi-default-east-us\/providers\/Microsoft.OperationalInsights\/workspaces\<string>",
            "__metadata": {
            "resultType": "raw",
            "total": 3,
            "RequestId": "<string>",
            "Status": "Successful",
            "NumberOfDocuments": 0,
            "StartTime": "<date>",
            "LastUpdated": "<date>",
            "ETag": "<tag>",
            "sort": [
            {
            "name": "TimeGenerated",
            "order": "desc"
            }
            ],
            "requestTime": <value>
            },
            "value": [
            { …

            19 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
            • Sharepoint Integration

              Could there be functionality to embed dashboard widgets into a SharePoint page? We are putting a lot of our SCOM dashboards into SharePoint, and it would be fantastic to include Ops Insights dashboards into the same SharePoint site, without sending users to another web site.

              13 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                2 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →

                Thanks for the feedback.

                A starting point you could look at in this sense is the opsmgr dashboard integration, which is script-based (so, easy to dissect and recompose – it shows you how to issue your own search to the portal’s search page programmatically) http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6519195-integrate-search-into-opsmgr-dashboards

                or today you can run your own code – the recently released Search API http://blogs.technet.com/b/momteam/archive/2015/06/18/oms-log-search-api-documentation-is-here.aspx

                Also look at this other – related, more generic – idea http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6984082-access-read-only-dashboard-directly-from-url

              • Log Analytics can not use Service Tag for NSG

                Now, Log Analytics can not use Service Tag configuration in NSG.
                We want to use NSG for limitation of outbound from VM via NSG.
                But Log Analytics has a URL limitation for connection to workspace.
                So, it is impposible to configure in NSG. (It is IP address!)

                If Log Analytics has Service Tag in NSG, we will be enable to use it for NSG in environment.
                We're waiting for release this feature.

                10 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
                • Create intelligence packs for Java, Tomcat and PostgreSQL

                  We leverage Java, Tomcat and PostreSQL heavily for our web applications. I would like to leverage OMS to monitor those regarless of where those servers are deployed. Today, on RHEL, I have no visibility to metrics other than hardware (CPU, Memory and Disk).

                  4 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
                  • Prompt to co-relate network data with all data from solution packs(including alerts)

                    It would be great if we can configure (based on a prompt) which Network link depends on what Solution pack and servers.

                    1) A networking Solution pack that gets SUbnet/Link data
                    2) Azure ML figures what OMS data is dependent on what network link
                    3) OMS prompts user if you want to suppress all OMS Alerts that feed off any Solution that is dependent on this Link when the link is down.

                    Scenario: AD, AD replication + network solution packs implemented.

                    OMS ALerts when log search 'ABC' returns 'N' results. The search spans data sent by servers across data centers…

                    2 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
                    • web automation

                      Not sure where this fits in but it would be wonderful if we could do web automation tasks, like selenium actually more like site24. Hate to be me too but in this case either partnering with site24 or coming up with the equivalent would be very nice.

                      2 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        2 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →

                        Do you have a preference for if we allowed you to setup automation tasks (e.g. using Azure Automation or for site monitoring Application Insights) or if we were to have a way for selenium/site24 to insert alerts into OMS based on the results of tests?

                      • Combine Data of Log analytics to 3rd Party Product

                        I would like to have a function to link the data to the 3rd party product and store the same data in that 3rd Party product.

                        Japanese customers are considering using Log Analytics as a service.
                        The service is used by another customer.
                        Long-term preservation of data is important for this business model.
                        It is thought that retention periods of 5 years and 10 years are commonplace.

                        Log Analytics is the longest two years.
                        This does not meet customer's request.
                        So, we want to send data to third party products without API or PowerShell.

                        I would like to add this…

                        1 vote
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          0 comments  ·  Extensibility / Partner scenarios  ·  Flag idea as inappropriate…  ·  Admin →
                        • Don't see your idea?

                        Feedback and Knowledge Base