Mar 07 2019
01:20 AM
- last edited on
Apr 07 2022
05:42 PM
by
TechCommunityAP
Mar 07 2019
01:20 AM
- last edited on
Apr 07 2022
05:42 PM
by
TechCommunityAP
I have all my data (from all different operations) in default AzureDiagnostics table.
Basically I want to create separate table for different operations.
For Eg:
I want to create 'Agent_Job' table from below query.
AzureDiagostics | where Category == "Agent" and OperationName == "Job"I want to create 'Agent_Alert' table from below query.
AzureDiagostics | where Category == "Agent" and OperationName == "Alert"
Mar 07 2019 05:38 AM - edited Mar 07 2019 05:56 AM
Whilst KQL has the ability to create a table its not surfaced in Log Analytics, look at Azure Data Explorer for that.
You could create an "Agent_Alert" column?
Mar 08 2019 12:01 AM
Hi,
Tables can be created on the fly via query but those tables are visible only within the execution of the query not to everyone. You cannot create new tables visible to everyone without using features like data ingestion api, custom logs, etc. Best is to put your queries into saved searches. That is the intention of those.
Feb 19 2023 09:17 PM