Azure Log Analytics: Disk Space Usage ; Part 3

Azure Log Analytics: Disk Space Usage ; Part 3 Category    Log Analytics Syntax v2 ; OMS Syntax As promised here is Part 3 Part 1: Part 2: Part 3: this post In this post we’ll look at Trends and doing an estimate. My query now looks like the one further down this article (see…


Azure Log Analytics: Queries, Are you looking for a pattern? RegEx

RegEx is a common way of finding data .  It was helpful recently when Jon needed a small bit of help (he says more blogs will follow – the first post is quite cryptic). Basically what was needed was to only show the UserNames that started with A thru E and maybe a few other…


Azure Log Analytics: Queries, Has the Hostname been changed?

The question was asked, how do you find a Computer using Log Analytics that has had its name changed? Normally you would find an EventID that contains this by doing a web search or by looking in Eventvwr after trying a name change yourself on a test server.   Both methods said that EventID 6011 should…


The most basic basic of OMS / Log Analytics is….

Updated post (27th June2018): The Log Analytics landing page has been updated [Workspace Summary] is the new “Overview” —————————————————————— …please use the Azure Portal to access the product not the Legacy OMS portal. Simply from Portal.Azure.Com, select your Log Analytics workspace – then press OVERVIEW or Log Search rather than OMS Portal.  The old…


Azure Log Analytics: Dynamic Arrays

In my first post on parsing we looked for Eventlog data and parsed the info to get User names from with data in the Event log.  Sometimes we want to work with a list of values such as User or Computer names and look for these in the data.  Jon once again asked for a…


Have you have upgraded to the new OMS Query language?

This new language and features was announced here  The new documents and samples can be found at and