Skip to content

Commit 8347f4e

Browse files
committed
Replacing custom fields method with data collection transformations
1 parent d43ab9f commit 8347f4e

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/azure-monitor/logs/parse-text.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,14 +15,14 @@ This article describes different options for parsing log data in Azure Monitor w
1515

1616
## Permissions required
1717

18-
- To parse data at collection time, you need `microsoft.operationalinsights/workspaces/customfields/write` permissions, as provided by the [Log Analytics Contributor built-in role](./manage-access.md#log-analytics-contributor), for example.
18+
- To parse data at collection time, you need `Microsoft.Insights/dataCollectionRuleAssociations/*` permissions, as provided by the [Log Analytics Contributor built-in role](./manage-access.md#log-analytics-contributor), for example.
1919
- To parse data at query time, you need `Microsoft.OperationalInsights/workspaces/query/*/read` permissions, as provided by the [Log Analytics Reader built-in role](./manage-access.md#log-analytics-reader), for example.
2020

2121
## Parsing methods
2222
You can parse data either at ingestion time when the data is collected or at query time when you analyze the data with a query. Each strategy has unique advantages.
2323

2424
### Parse data at collection time
25-
When you parse data at collection time, you configure [custom fields](../logs/custom-fields.md) that create new properties in the table. Queries don't have to include any parsing logic and use these properties as any other field in the table.
25+
When you parse data at collection time, you create [transformations](../essentials/data-collection-transformations.md) that create new properties in the table. Queries don't have to include any parsing logic and use these properties as any other field in the table.
2626

2727
**Advantages:**
2828

@@ -53,7 +53,7 @@ When you parse data at query time, you include logic in your query to parse data
5353
- Can create overhead when you run complex logic against very large record sets (billions of records).
5454

5555
## Parse data as it's collected
56-
For more information on parsing data as it's collected, see [Create custom fields in Azure Monitor](../logs/custom-fields.md). This approach creates custom properties in the table that can be used by queries like any other property.
56+
For more information on parsing data as it's collected, see [Structure of transformation in Azure Monitor](../essentials/data-collection-transformations-structure.md). This approach creates custom properties in the table that can be used by queries like any other property.
5757

5858
## Parse data in a query by using patterns
5959
When the data you want to parse can be identified by a pattern repeated across records, you can use different operators in the [Kusto Query Language](/azure/kusto/query/) to extract the specific piece of data into one or more new properties.

0 commit comments

Comments
 (0)