Gen3 Log Management – How to Filter Logs by Actual Hostname or Server IP?

[sagarhb]

Hi Team,

We are currently using the Gen3 Log Management UI and have observed a difference compared to the Gen2 (Classic) experience.

In the Gen2 UI, we were able to filter logs using the dt.entity.host field, which mapped to the actual host and made it easy to identify logs for a specific server.

However, in the Gen3 UI:

• The Hostname filter displays the Azure VM name instead of the actual server hostname.
• We are unable to filter logs using the server IP address or the actual OS hostname.
• We also cannot find an equivalent field to dt.entity.host that provides the same functionality as in Gen2.

Our requirements are:

1. Filter logs using the actual server hostname.
2. Filter logs using the server IP address.
3. Identify the equivalent field in Gen3 for dt.entity.host used in the Gen2 UI.

Is there a way to achieve this in Gen3? If additional configuration, log enrichment, or OneAgent settings are required, please let us know the recommended approach.