topic How to publish log folder name (log.source) when selecting logs from multiple folders in Log Analytics

How to publish log folder name (log.source) when selecting logs from multiple folders

Murugesan — Fri, 27 Oct 2023 05:48:51 GMT

Hello Everyone,

I had able to fetch logs by configuring the Custom log source(by selecting *)from multiple folders. While I was successful in getting log data, I want to publish "Each folder" name where from the logs are coming. Currently, my log source is showing as it is, as how configured in source (//xxxx/*). However, it has many folders and I would like to get each folder name in the output.

Could you please advise how to get this feature ? Appreciate your support.

Note : I am collecting logs from Windows Server (custom logs and JVS Logs)

regards,

Murugesan

Re: How to publish log folder name (log.source) when selecting logs from multiple folders

ChadTurner — Fri, 27 Dec 2024 13:29:28 GMT

@Murugesan - were you able to solve this in Classic Logs? If not, it should be readily available in the DQL log segments now.

Re: How to publish log folder name (log.source) when selecting logs from multiple folders

Joachim_Erdei — Mon, 30 Dec 2024 11:15:59 GMT

Hi Murugesan,

Please look into https://docs.dynatrace.com/docs/analyze-explore-automate/logs/lma-log-ingestion/lma-log-ingestion-via-oa/lma-custom-log-source#expand--enrich-the-logs-with-custom-attributes--2 section "Configure log source", expandable point 6 - it might be the thing you need if I understood correctly.