Azure event hub azure.activitylogs.properties

Elastic Stack Kibana
1

Hello,
I'm trying to analyze the information from cloud Azure.
I have activated the EventHub and I receive the log, but i have data form Azure Appgataway like

azure.activitylogs.properties
{
"receivedBytes": 65,
"serverStatus": "200",
"httpMethod": "GET",
"requestQuery": "",
"httpVersion": "HTTP/2.0",
"instanceId": "appgw_0",
"clientIP": "xx.xx.xx.xx",
"httpStatus": 200,
"sslEnabled": "on",
"clientPort": 25802,
"host": "service.local.it",
"sslClientCertificateIssuerName": "",
"sslCipher": "ECDHE-RSA-AES256-GCM-SHA384",
"originalRequestUriWithArgs": "/dol/xxxx.js",
"userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0",
"requestUri": "/dol/xxxx.js",
"transactionId": "",
"sslClientCertificateFingerprint": "",
"originalHost": "service.local.com",
"timeTaken": 0.012,
"serverResponseLatency": "0.008",
"sslProtocol": "TLSv1.2",
"serverRouted": "100.100.151.19:443",
"sslClientVerify": "NONE",
"sentBytes": 4261
}

it is possible to made a graph as example for serverResponseLatency?

I tried but azure.activitylogs.properties is not recognize into the visualization graph.

azure.activitylogs.properties appears as flattened type

best regards

2

Unfortunately as a flattened type, there isn't great support in Kibana currently. You can track updates on this GitHub issue: Support flattened field type from Elasticsearch · Issue #25820 · elastic/kibana · GitHub

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.