Skip to content

Commit f4f8639

Browse files
committed
fixes
1 parent 27976b2 commit f4f8639

File tree

2 files changed

+6
-6
lines changed

2 files changed

+6
-6
lines changed

articles/azure-monitor/logs/custom-fields-migrate.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ Start by locating custom fields to replace. If you already know the custom field
4444

4545
1. Note if any data collection rules (DCRs) are associated with given table.
4646

47-
- If any DCRs are present in corresponding section, it means that any pre-existing custom fields were either already implemented within these DCRs, or abandoned upon DCR creation. We are going to examine the content of custom fields on the next step of this tutorial and determine whether more updates to DCRs needed.
47+
- If any DCRs are present in corresponding section, it means that any pre-existing custom fields were either already implemented within these DCRs, or abandoned upon DCR creation. You're going to examine the content of custom fields on the next step of this tutorial and determine whether more updates to DCRs needed.
4848
- If there are no data collection rules associated with the table, then all columns in given table with names ending with "_CF" will be custom fields subject to replacement.
4949

5050
:::image type="content" source="media/custom-fields-migrate/manage-table-details.png" alt-text="Screenshot showing the properties of a table including data collection rules associated with the table" lightbox="media/custom-fields-migrate/manage-table-details.png":::
@@ -53,9 +53,9 @@ Start by locating custom fields to replace. If you already know the custom field
5353

5454
:::image type="content" source="media/custom-fields-migrate/custom-columns.png" alt-text="Screenshot showing the column listing for a table including any custom columns" lightbox="media/custom-fields-migrate/custom-columns.png":::
5555

56-
1. Note the names of these columns as we are going to determine their content on the next step.
56+
1. Note the names of these columns since you'll determine their content in the next step.
5757

58-
## Understanding custom field content
58+
## Understand custom field content
5959
Since there is no way to examine the custom field definition directly, you need to query the table to determine the custom field formula.
6060

6161
1. Select **Logs** in the side menu and run a query to get a sample of data from the table.
@@ -74,15 +74,15 @@ You're now ready to create the required KQL snippet and add it to a DCR. This lo
7474

7575
1. Modify the query for the table using KQL to replicate the custom field logic. If you have multiple custom fields to replace, you may combine their calculation logic into a single statement.
7676

77-
- Use [parse](/azure/data-explorer/kusto/query/parseoperator.md) operator for pattern-based search of a substring within a string.
77+
- Use [parse](/azure/data-explorer/kusto/query/parseoperator) operator for pattern-based search of a substring within a string.
7878
- Use [extract()](/azure/data-explorer/kusto/query/extractfunction) function for regex-based substring search.
7979
- String functions as [split()](/azure/data-explorer/kusto/query/splitfunction), [substring()](/azure/data-explorer/kusto/query/substringfunction) and [many others](/azure/data-explorer/kusto/query/scalarfunctions#string-functions) may also be useful.
8080

8181
:::image type="content" source="media/custom-fields-migrate/log-analytics-transformation-query.png" alt-text="Screenshot of Log Analytics with query returning data using transformation query" lightbox="media/custom-fields-migrate/log-analytics-transformation-query.png":::
8282

8383
2. Determine where your new KQL definition of the custom column needs to be placed.
8484

85-
- For logs collected using [Azure Monitor Agent (AMA)](../../agents/agents-overview.md), [edit the DCR](../../essentials/data-collection-rule-edit.md) collecting data for the table, adding a transformation. For an example, see [Samples](../essentials/data-collection-transformations.md#samples). The transformation query is defined in the `transformKql` element.
85+
- For logs collected using [Azure Monitor Agent (AMA)](../agents/agents-overview.md), [edit the DCR](../essentials/data-collection-rule-edit.md) collecting data for the table, adding a transformation. For an example, see [Samples](../essentials/data-collection-transformations.md#samples). The transformation query is defined in the `transformKql` element.
8686
- For resource logs collected with [diagnostic settings](../essentials/diagnostic-settings.md), add the transformation to the [workspace default DCR](../essentials/data-collection-transformations.md#workspace-transformation-dcr). The table must [support transformations](../logs/tables-feature-support.md).
8787

8888

articles/azure-monitor/logs/custom-fields.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.date: 03/31/2023
1212
# Create custom fields in a Log Analytics workspace in Azure Monitor (Preview)
1313

1414
> [!NOTE]
15-
> Creation of new custom fields will be disabled starting March 31st, 2023. Custom fields functionality will be deprecated, and existing custom fields will stop functioning by March 31st, 2026. You should [migrate to ingestion-time transformations](custom-fields-migrate.md) to keep parsing your log records.
15+
> Creation of new custom fields will be disabled starting March 31, 2023. Custom fields functionality will be deprecated, and existing custom fields will stop functioning by March 31, 2026. You should [migrate to ingestion-time transformations](custom-fields-migrate.md) to keep parsing your log records.
1616
1717
> [!IMPORTANT]
1818
> Custom fields increases the amount of data collected in the Log Analytics workspace which can increase your cost. See [Azure Monitor Logs pricing details](cost-logs.md) for details.

0 commit comments

Comments
 (0)