Share via

OperationName field is EMPTY in the AzureActivity table in Log Analytics

Geordie Marin Hines 0 Reputation points
2023-07-31T18:53:53.2566667+00:00

Hello Experts,

ISSUE: OperationName field is EMPTY in the AzureActivity table in Log Analytics.

Have an issue with a customer which data is being recorded normally in log analytics, except for the OperationName field. For some reason this attribute is always empty in AzureActivity, no clue why this is happening. User's image

As you can see above, in my workspace it always shows data in this field, but for my customer is always an empty field.

Any suggestion is welcome.

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,018 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ryan Hill 27,026 Reputation points Microsoft Employee
    2023-08-04T00:26:58.0466667+00:00

    I can't tell from the image where OperationName is supposed to be empty. But to troubleshoot, I suggest the following steps:

    1. Verify that the activity logs being generated for the Azure resource you're scoping to. You can do this by checking the Activity Log blade in the portal.
    2. Verify that the Log Analytics workspace is configured correctly to collect and process activity logs. You can check the Diagnostic settings blade for the resource. Ensure that the configured diagnostic setting are set to the expected Log Analytics workspace.

    From the query above, I would say the query is fairly broad. You can try extending the time frame buy using | TimeGenerated > ago(90d) or something similar or querying under different scopes to see if the issue persists. If so, please comment down below so we can work more closely with you regarding this matter.