You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| sSiteName | Not be populated | depends on customer data collection configuration | The MMA agent could turn on collection by default, but by principle is restricted from making configuration changes in other services.<p>Enable the `Service Name (s-sitename)` field in W3C logging of IIS. See [Select W3C Fields to Log](/iis/manage/provisioning-and-managing-iis/configure-logging-in-iis#select-w3c-fields-to-log).|
27
27
| Fileuri | No longer populated | not required for MMA parity | MMA doesn't collect this field. This field was only populated for IIS logs collected from Azure Cloud Services through the Azure Diagnostics Extension.|
28
28
29
29
### Windows event table
30
30
31
31
This table collects Events from the Windows Event log. There are two other tables that are used to store Windows events, the SecurityEvent and Event tables.
32
32
33
-
|LAW Field | Difference | Reason| Additional Information |
34
-
|---|---|---|---|
33
+
|LAW Field | Difference | Reason| Additional Information |
| UserName | MMA enriches the event with the username before sending the event for ingestion. AMA doesn't do the same enrichment. | The AMA enrichment isn't implemented yet. | AMA principles dictate that the event data should remain unchanged by default. Adding and enriched field adds possible processing errors and extra costs for storage. In this case, the customer demand for the field is very high and work is underway to add the username. |
36
36
37
37
### Perf Table for Performance Counters
@@ -40,8 +40,8 @@ The Perf table collects performance counters from Windows and Linux agents. It o
40
40
41
41
| LAW Field | Difference | Reason | Additional Information |
| InstanceName | Reported as **_Total** by OMS<br>Reported as **total** by AMA || Where `ObjectName == "Logical Disk"` and `CounterName == "% Used Space"`, the `InstanceName` value is reported as **_Total** for records ingested by the OMS agent, and as **total** for records ingested by the Azure Monitor Agent (AMA).\*|
44
-
| CounterValue | Is rounded to the nearest whole number by OMS but not rounded by AMA || Where `ObjectName == "Logical Disk"` and `CounterName == "% Used Space"`, the `CounterValue` value is rounded to the nearest whole number for records ingested by the OMS agent but not rounded for records ingested by the Azure Monitor Agent (AMA).\*|
43
+
| InstanceName | Reported as **_Total** by OMS<br>Reported as **total** by AMA || Where `ObjectName` is **"Logical Disk"** and `CounterName` is **"% Used Space"**, the `InstanceName` value is reported as **_Total** for records ingested by the OMS agent, and as **total** for records ingested by the Azure Monitor Agent (AMA).\*|
44
+
| CounterValue | Is rounded to the nearest whole number by OMS but not rounded by AMA || Where `ObjectName` is **"Logical Disk"** and `CounterName` is **"% Used Space"**, the `CounterValue` value is rounded to the nearest whole number for records ingested by the OMS agent but not rounded for records ingested by the Azure Monitor Agent (AMA).\*|
45
45
46
46
\* Doesn't apply to records ingested by the Microsoft Monitoring Agent (MMA) on Windows.
0 commit comments