OTelLogs

Logs emitted by an OpenTelemetry source.

Table attributes

Attribute Value
Resource types microsoft.operationalinsights/workspaces
Categories Applications
Solutions LogManagement
Basic log Yes
Ingestion-time transformation Yes
Sample Queries Yes

Columns

Column Type Description
Attributes dynamic A collection of key-value pairs representing properties of the log.
_BilledSize real The record size in bytes
Body string Content of the log record.
ClientBrowser string Name and version of the web browser used by the client that triggered this span.
ClientCity string City where the client device is located.
ClientCountryOrRegion string Country or region where the client device is located.
ClientIP string IP address of the client device.
ClientModel string Model of the client device.
ClientOS string Operating system of the client device.
ClientStateOrProvince string State or province where the client device is located.
ClientType string Type of the client device.
DroppedAttributesCount int The number of attributes that were discarded by the data source.
EndUserId string Persistent string that uniquely represents an authenticated user of the service.
_IsBillable string Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
ItemCount int The number of spans represented by this record. This value is greater than 1 when sampling is in effect.
K8sContainerName string The name of the Kubernetes container, if the service is running in a Kubernetes cluster.
K8sNamespaceName string The name of the Kubernetes namespace, if the service is running in a Kubernetes cluster.
K8sPodName string The name of the Kubernetes pod, if the service is running in a Kubernetes cluster.
Measurements dynamic Application-defined measurements associated with this event.
OperationName string Service-defined name of the overall operation.
ResourceAttributes dynamic Resource attributes emitted by an OpenTelemetry source.
_ResourceId string A unique identifier for the resource that the record is associated with
RoleName string A human-readable name of the service emitting this span. This is a simplified service identifier combining ServiceNamespace and ServiceName.
ScopeName string The name of the instrumentation scope.
ScopeVersion string The version of the instrumentation scope.
SDKVersion string The name and version of the SDK, agent, or other source that emitted this record.
ServiceInstanceId string A unique identifier for the instance of the service.
ServiceName string Logical name of the service.
ServiceNamespace string A namespace for ServiceName.
ServiceVersion string Version information associated with the service.
SessionId string Service-defined session id.
SeverityLevel int A low cardinality binning of the value of SeverityNumber.
SeverityNumber int Normalized number representing the log level of this record.
SeverityText string The log level of this record.
SourceSystem string The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
SpanId string The identifier of the span this log is about.
_SubscriptionId string A unique identifier for the subscription that the record is associated with
SyntheticSource string Upstream source of this event if it is well-known to be synthetic (ex. web crawlers).
TenantId string The Log Analytics workspace ID
TimeGenerated datetime Date and time when the log was emitted.
TraceId string The identifier of the trace this log belongs to.
Type string The name of the table
UserAccountId string Service-defined account associated with the user.
UserId string Anonymous ID of a user accessing the service.