topic Re: Log v2 filtering on custom fields in Log Analytics

LogV2 filtering on custom fields

Bert_VanderHeyd — Wed, 27 Jul 2022 15:13:47 GMT

We use Logv2 to stream in logs via LogStash using the API and the logstash output plugin. This approach works well but there is a lot of usefull info stored as custom fields.

Although you can see them event per event in the log view screens, it's impossible to filter on them. It looks like only a list of specific predefined fields are searchable.

Is this normal? Am I missing something here? Are there plans to improve this?

Re: Log v2 filtering on custom fields

sia_h — Mon, 25 Jul 2022 09:27:48 GMT

Hi Bert,

You have to add them as custom attributes. Then, they will be available as a filter.

E.g.

Sia

Re: Log v2 filtering on custom fields

Bert_VanderHeyd — Mon, 25 Jul 2022 09:36:40 GMT

Many thanks. Easy as cake and makes a lot of sense 😉