Questions tagged [azure-log-analytics]

Use for Azure Monitor Log Analytics questions (was: OMS)

Azure Monitor Log Analytics is a service in Azure that monitors your cloud and on-premises environments to maintain their availability and performance (used to be known as Operations Management Suite - OMS). It collects data generated by resources in your cloud and on-premises environments and from other monitoring tools to provide analysis across multiple sources. This article provides a brief discussion of the value that Log Analytics provides, an overview of how it operates, and links to more detailed content so you can dig further.

1047 questions
44
votes
4 answers

Azure application insights or log analytics

What is the use case for Azure application insights or log analytics? I am using APIM and Azure Functions and want to perform logging for requests. Which one is the best fit, application insights or log…
12
votes
2 answers

How to query my Application Insights Logs (Analytics) from Kusto.Explorer?

Update July 13, 2021 The links used below are now partially obsolete. Here is the new section on language differences. Original post On Azure Portal, in my App Insights / Logs view, I can query the app data like this: app('my-app-name').traces The…
10
votes
1 answer

How do I write a Kusto query that uses a regex to filter on a where clause

In Azure Log Analytics I'm trying to use Kusto to query requests with a where condition that uses a regex. The query I'm trying is requests | where customDimensions.["API Name"] matches regex "\w*-v\d*" but this returns a syntax error. The…
Nick Graham
  • 1,311
  • 3
  • 14
  • 21
10
votes
2 answers

Azure log analytics timechart with multiple dimensions

In the Azure new log analytics query platform you can query for performance counters and summarize them to finally create a nice graph. Following the multiple dimensions documentation example it says Multiple expressions in the by clause creates…
guillem
  • 2,768
  • 2
  • 30
  • 44
9
votes
0 answers

Azure Gateway WAF - Diagnostics Issue

I'm trying to setup Azure WAF (v2) on my App Gateway (currently in detection mode first to handle false positive cases), however, I'm seeing this warning: To view your detection logs, you must have diagnostics enabled. So, I went to Diagnostic…
8
votes
2 answers

How many Log Analytics workspaces to use for multiple Application Insights instances?

We have multiple different apps, each deployed in multiple environments, each monitored by a separate Application Insight instance. For example 2 web applications, each deployed in dev, test, prod environments, that means 6 different Application…
jimmyj
  • 93
  • 2
  • 8
8
votes
2 answers

Query multiple tables in Azure Log Analytics

I am looking at Azure log analytics for a web app, and I have multiple out-of-the-box "tables" containing data: traces, requests, exceptions, etc. Can I construct a query that runs on data from multiple tables? I don't want to join data from…
Peter
  • 3,619
  • 3
  • 31
  • 37
8
votes
1 answer

How to use OMS for Azure web app

I want to explore OMS (especially Service Map) for Azure webApps, but it shows following error, "In order to on-board a server to Service Map, the Microsoft Dependency Agent needs to be installed on a server being monitored by OMS. Documentation can…
Pragmatic
  • 3,093
  • 4
  • 33
  • 62
7
votes
3 answers

Cost calculation of Azure Log analytics workspace

Is there any way to get the details how the cost of Azure Log analytics service is metered? How do I know why my analytics log service is so expensive? Do you have any tips? I just wish log the applications of azure functions paying as little as…
Cauê Prado
  • 73
  • 1
  • 3
7
votes
1 answer

Kusto Custom Sort Order?

How do I perform a custom sort order in Kusto? Example query: //==================================================// // Assign variables //==================================================// let varStart = ago(2d); let varEnd = now(); let…
ericOnline
  • 1,586
  • 1
  • 19
  • 54
7
votes
1 answer

Kusto Query, selecting an interval of 5 minutes and calculate the average

I'm fairly new to the Kusto Query language so perhaps this is something very common, but I really can't find my answer. So here goes. I've enabled performance gathering with Azure Log Analytics on some of our servers and would like to achieve the…
7
votes
1 answer

How to transform a JSON array of objects to a Kusto table?

I have a JSON schema that I get from the server and I need to transform this JSON into a log analytics query language table and use that table to make a join with another table. The JSON has the following schema: [{ "X": "xyz", "Y": "xyz", …
user10691876
7
votes
1 answer

Azure Log Analytics query if property exists

I am trying to check if my customDimensions object has a property and then only count the queries that have the property set to something. It is counting queries that don't have the SupportedLanguage property in the customDimensions object. Here is…
7
votes
1 answer

How to create comments in Azure Log Analytics

I'm trying to create comments in my Azure Log Analytics queries and I'm stumped. Part of my challenge I think is treating this system as if it were SQL, which it is clearly not. using "--" for instance results in a syntax error traces | where…
Matthew Thurston
  • 720
  • 5
  • 22
6
votes
1 answer

Kusto\KQL - Render timechart for simple count value

I have a kql-query which calculates number of uploaded BLOBS in Azure storage since last 24 hours. The query blow returns a number as expected when run in Azure log analytics. StorageBlobLogs | where TimeGenerated > ago(1d) and OperationName has…
1
2 3
69 70