topic Logs not extracting in All Apps and Add-ons

Logs not extracting

usmsplunksme — Sun, 07 Jun 2020 14:44:04 GMT

Hi all,
any assistance with this app would be grateful. I managed to connect to our LA workspace and receive logs in splunk, but none of the logs have any extractions.

any assistance would be appreciated.

Re: Logs not extracting

edhealea — Tue, 01 Sep 2020 17:45:02 GMT

Did you ever make any head way with this? I am having the same issue with pulling in log analytics events from Azure using the Grabber.

Re: Logs not extracting

grout — Sat, 31 Jul 2021 07:57:31 GMT

I am facing the same issue with the kusto graber and its not able to parse the json format

Re: Logs not extracting

edhealea — Mon, 02 Aug 2021 16:07:11 GMT

I couldn't find any thing published for this so I had to create a field extraction for each individual query that we implemented. It took a few tries on each one. Just when I thought I had it, MS would through a new format in the query but they have been pretty stable lately. They are not the prettiest regexes but they are working for us.

Re: Logs not extracting

02sangeet — Wed, 22 Sep 2021 17:20:07 GMT

Could you please help us, giving some idea about the extraction you used to solve this issue. I am also facing the same issue here, though we are able to fetch some data from MS Azure log analytics but data shows only header part.