Creating an Azure Monitor DCR not possible due to sample upload failing

Question

Creating an Azure Monitor DCR not possible due to sample upload failing

János Szigetvári 46

I am trying to follow the following tutorial ( https://learn.microsoft.com/en-us/azure/azure-monitor/logs/tutorial-logs-ingestion-portal#parse-and-filter-sample-data ), to create a custom log table in my log analytics workspace, and as I am trying to upload a sample of the logs I want to send to Azure, the file upload always fails. User's image

I have tried it with

Firefox
Firefox, with NoScript and AdblockPlus disabled
Chromium
Microsoft Edge, from a Windows VM
a normal 30 MB JSON log file
a small ~200 KB JSON log file but the result was always the same, and there is no way to skip that step, so I am unable to proceed, and am therefore stuck. What should I try to overcome this obstacle? Is there perhaps a known problem? Thanks! János

Andrew Blumhardt 10,051 Reputation points Microsoft Employee

2023-04-13T13:23:04.1333333+00:00

I am seeing the same issue. Asking internally for a status.
János Szigetvári 46 Reputation points

2023-04-14T13:40:10.4466667+00:00

I tried it today too, and it still doesn't work.
Andrew Blumhardt 10,051 Reputation points Microsoft Employee

2023-04-18T16:31:06.82+00:00

I created a support case using one of my lab workspaces. I recommend doing the same within the workspace blade for tracking.

Accepted answer

0 additional answers

Your answer

Andrew Blumhardt 10,051 Reputation points Microsoft Employee

2023-04-13T13:23:04.1333333+00:00

I am seeing the same issue. Asking internally for a status.
János Szigetvári 46 Reputation points

2023-04-14T13:40:10.4466667+00:00

I tried it today too, and it still doesn't work.
Andrew Blumhardt 10,051 Reputation points Microsoft Employee

2023-04-18T16:31:06.82+00:00

I created a support case using one of my lab workspaces. I recommend doing the same within the workspace blade for tracking.

Answer 1

Andrew Blumhardt 10,051 Microsoft Employee

I made the same mistake in recreating the error. The error could be more descriptive. :-)

If you follow the instructions in the link shared to create a sample file it should work. It looks like this is caused by an improperly formatted sample file.

János Szigetvári 46 Reputation points

2023-04-19T04:30:46.9133333+00:00

Ah, yes, then it must have been a PEBKAC in deed. I will test the procedure described in the documentation. I'm wondering if it makes any difference if my logs are already in json format, before doing anything to them...
János Szigetvári 46 Reputation points

2023-04-19T05:29:14.8966667+00:00

Yeah, just as I imagined, the LogGenerator.ps1 has problems dealing with logs that are already in json format. Too bad, because the json logs already had the key-value pairs included. I don't know how the script will do that on its own, but we'll see.
János Szigetvári 46 Reputation points

2023-04-19T08:06:46.6266667+00:00

Okay, for the JSON problem, the solution was to install the latest PowerShell version. After that the upload was successful.
Now I have a second question: If the RawData I have is already in JSON, can I skip the process of having it parsed as unstructured text?
János Szigetvári 46 Reputation points

2023-04-19T08:15:47.4433333+00:00

And also let me please to thank you Andrew for your help so far!
D Kleeman 0 Reputation points

2023-07-06T10:20:53.0466667+00:00

Andrew's answer is mainly right in that Azure is very fussy about the format of the file and the error message could definitely be more descriptive.

The solution is to stick rigidly to RFC 8259 to format the JSON. I found that this website will check your file and correct some errors. I did not need to use the PowerShell script.

Share via

Creating an Azure Monitor DCR not possible due to sample upload failing

0 additional answers

Your answer