Microsoft Azure App for Splunk - Billing filtering on missing properties.subscriptionId

[apps_inpaytech]

I have the Microsoft Azure App for Splunk 2.0.1 and I have data for `azure-consumption` (sourcetype=azure:billing) via Splunk Add-on for Microsoft Azure 4.0.3.

The Billing dashboard queries are filtering on properties.subscriptionId, but this is not in my data, I have subscriptionGuid and subscriptionName.

We have recently moved to an MCA single billing model, it looks like this has caused the issue as the legacy dashboards stopped at this time.

It looks like the type: Microsoft.Consumption/usageDetails has completely changed, i notice that the 'kind' has changed from 'legacy' to 'modern'.

Has anyone else encountered this and have a solution?

Are the dashboards supposed to work for my data?

Thanks

[tedgett]

@apps_inpaytechI am seeing the same issue. Did you ever find a solution? I also tried using the new Add-On for Cloud Services, but that also has a different sourcetype with different fields so that was no better.

[apps_inpaytech]

@tedgett  I ended up taking the existing dashboard and making my own version with the corrected queries.