I have been trying to extract a field form my custom log, in log analytics

Question

Peace and Good day does anyone know how to just extract a field from a log in log analytics anymore it used to just be right under the raw date are under the prompts for stuff. but know its no longer there. Any help would be great

Answer 1

@Garon Miller - Welcome to Microsoft Q&A and thanks for reaching out to us.

Apologies for the delay in responding to you.

Are you still facing issues with extracting a field from a log in Log Analytics?

If so, try this and see if it helps.

you can use the "project" operator in your query. Here's an example:

Let's say you have a log that contains a field called "Message" and you want to extract just that field. You can use the following query:

MyLog
| project Message

This will return to a table with just the "Message" field.

You can also use the "extend" operator to create a new field based on an existing field. Here's an example:

MyLog
| extend NewField = Message

This will create a new field called "NewField" that contains the same data as the "Message" field.

Hope this helps. and please feel free to reach out if you have any further questions.

---

If the above response was helpful, please feel free to "Accept as Answer" and click "Yes" so it can be beneficial to the community.