SOLVED

Azure Portal Log search, how do I change the default column order?

%3CLINGO-SUB%20id%3D%22lingo-sub-332514%22%20slang%3D%22en-US%22%3EAzure%20Portal%20Log%20search%2C%20how%20do%20I%20change%20the%20default%20column%20order%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-332514%22%20slang%3D%22en-US%22%3E%3CP%3EBy%20default%20the%20Azure%20Portals%20Log%20Analytics%20search%20has%20columns%20displayed%20that%20I%20rarely%20use.%20How%20can%20I%20customize%20my%20defaults%20so%20that%20it's%20actually%20useful%3F%20I'd%20like%20to%20be%20able%20to%20define%20what%20columns%20and%20the%20order%20they%20appear%20in.%20Right%20now%20I%20have%20to%20add%20and%20rearrange%20*every*%20time%20I%20search!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-332514%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-332589%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Portal%20Log%20search%2C%20how%20do%20I%20change%20the%20default%20column%20order%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-332589%22%20slang%3D%22en-US%22%3E%3CP%3EI%20always%20use%20the%20%22Project%22%20statement%20for%20this%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CBLOCKQUOTE%3EHeartbeat%3CBR%20%2F%3E%7C%20project%20TimeGenerated%20%2C%20Computer%20%2C%20OSMajorVersion%3C%2FBLOCKQUOTE%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

By default the Azure Portals Log Analytics search has columns displayed that I rarely use. How can I customize my defaults so that it's actually useful? I'd like to be able to define what columns and the order they appear in. Right now I have to add and rearrange *every* time I search! 

1 Reply
best response confirmed by danielvogel (Occasional Visitor)
Solution

I always use the "Project" statement for this:

 

Heartbeat
| project TimeGenerated , Computer , OSMajorVersion