Skip to content

Commit f0772ee

Browse files
Update tutorial-logs-ingestion-portal.md
1 parent 64e0112 commit f0772ee

File tree

1 file changed

+14
-18
lines changed

1 file changed

+14
-18
lines changed

articles/azure-monitor/logs/tutorial-logs-ingestion-portal.md

Lines changed: 14 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -125,17 +125,15 @@ Instead of directly configuring the schema of the table, you can upload a file w
125125
```kusto
126126
source
127127
| extend TimeGenerated = todatetime(Time)
128-
| parse RawData with *
129-
'":"'
128+
| parse RawData with
130129
ClientIP:string
131-
' - -' * '"'
132-
RequestType:string
133-
' '
134-
Resource:string
135130
' ' *
136-
'" '
137-
ResponseCode:int
138131
' ' *
132+
' [' * '] "' RequestType:string
133+
" " Resource:string
134+
" " *
135+
'" ' ResponseCode:int
136+
" " *
139137
```
140138
141139
1. Select **Run** to view the results. This action extracts the contents of `RawData` into the separate columns `ClientIP`, `RequestType`, `Resource`, and `ResponseCode`.
@@ -147,18 +145,16 @@ Instead of directly configuring the schema of the table, you can upload a file w
147145
```kusto
148146
source
149147
| extend TimeGenerated = todatetime(Time)
150-
| parse RawData with *
151-
'":"'
148+
| parse RawData with
152149
ClientIP:string
153-
' - -' * '"'
154-
RequestType:string
155-
' '
156-
Resource:string
157150
' ' *
158-
'" '
159-
ResponseCode:int
160151
' ' *
161-
| project-away RawData, Time
152+
' [' * '] "' RequestType:string
153+
" " Resource:string
154+
" " *
155+
'" ' ResponseCode:int
156+
" " *
157+
| project-away Time, RawData
162158
| where ResponseCode != 200
163159
```
164160
@@ -262,7 +258,7 @@ The following PowerShell script generates sample data to configure the custom ta
262258
$payload += $log_entry
263259
}
264260
# Write resulting payload to file
265-
New-Item -Path $Output -ItemType "file" -Value ($payload | ConvertTo-Json) -Force
261+
New-Item -Path $Output -ItemType "file" -Value ($payload | ConvertTo-Json -AsArray) -Force
266262
267263
} else {
268264
############

0 commit comments

Comments
 (0)