Log Analytics

Welcome to the "Azure Log Analytics ":https://azure.microsoft.com/en-us/services/log-analytics/ Feedback page. We appreciate your feedback and look forward to hearing from you. Use this site for new ideas and bug reports or to request help.
NOTE – Log Analytics is now a part of Operations Management Suite. Learn more at http://microsoft.com/OMS

How can we improve Azure Log Analytics ?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Integration with Advanced Threat Analytics (ATA)

    I'd love to see OMS and ATA play together so I can feed ATA data into OMS, provide dashboards, etc.

    82 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      2 comments  ·  Active Directory Assessment Solution  ·  Flag idea as inappropriate…  ·  Admin →
    • active directory group last accessed

      Seeing when a group in Active Directory was last queried, so I can see which groups are no longer used.

      14 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  Active Directory Assessment Solution  ·  Flag idea as inappropriate…  ·  Admin →

        This seems a very specific requirement, let’s see how many need this…

        Maybe this type of scenario is more appropriate for the ‘Security and Audit’ intelligence pack http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6519064-security-event-logs-should-be-collected which allows more ad-hoc exploration on the data that Windows already logs (if you enable certain audit policies).

        AD Assessment performs specific configuration checks that can ‘pass’ or ‘fail’ – a list of groups is not a possible output for that model.

      • Not assesing multiple domains

        Have recently added AD Assement solutions and i've got several domain controllers and Active directories. But it seems to assess 1 domain.

        1 vote
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          1 comment  ·  Active Directory Assessment Solution  ·  Flag idea as inappropriate…  ·  Admin →
        • Remove resolved AD issues

          Fix AD assessment. It never removes issues that have been resolved.

          1 vote
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            1 comment  ·  Active Directory Assessment Solution  ·  Flag idea as inappropriate…  ·  Admin →
          • Is this localized?

            Is this available in multiple languages?

            1 vote
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Active Directory Assessment Solution  ·  Flag idea as inappropriate…  ·  Admin →
            • 1 vote
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                0 comments  ·  Active Directory Assessment Solution  ·  Flag idea as inappropriate…  ·  Admin →
              • Active Directory Assessment - "Review processes with large working set sizes" seems to flag ATA 1.9

                This seems to be flagging the memory consumption of Microsoft.Tri,Gateway.exe aka Advanced Threat Analaytics Lightweight Gateway. ATA on the DC should be excluded from generating a false positive for this check. As an example: lsass.exe is consuming 185,500K where as ATA 1.9 Lightweight GW is consuming 1,325,000K of memory on the DC.

                1 vote
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  Active Directory Assessment Solution  ·  Flag idea as inappropriate…  ·  Admin →
                • Remote Registry Service Stopped Or Does Not Start Automatically

                  HI,

                  The alert "Remote Registry Service Stopped Or Does Not Start Automatically" from "AD Assessment" is not correct for me. he detect all my servers not in health, but services Remote Registry is started and Startup type to Automatic already.
                  Thanks

                  1 vote
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    1 comment  ·  Active Directory Assessment Solution  ·  Flag idea as inappropriate…  ·  Admin →
                  • Don't see your idea?

                  Feedback and Knowledge Base