Extracting the same custom field accross individual custom logs -> 'Custom field with this name already...











up vote
0
down vote

favorite












I'm collecting file logs from two different applications. I have 2 custom logs defined in Azure Log Analytics:




  • CustomLog1_CL

  • CustomLog2_CL


A sample message from both of these:




  • 2018-11-07 14:04:24.878 | 1 | Information | Caller.Type | some message logged from the application

  • 2018-11-08 07:30:00,002 [Thread] INFO Caller.Type - some other message logged from the application


I'd like to create/use the same custom field in both of these:




  • SeverityLevel_CF


However after extracting the SeverityLevel_CF field from CustomLog1_CL ( = Information), I can no longer extract the same field from CustomLog2_CL ( = INFO). Because of the message Custom field with this name already exists



You can also see that I'm met with the same issue on CallerType_CF custom field and CustomMessage_CF.



I'd like the name of this fields to be the same so that I can reuse the same search queries to aggregate logs by CallerType_CF, SeverityLevel_CF, CustomMessage_CF only iterating over different types of custom logs.



Can I achieve anything as such?










share|improve this question


























    up vote
    0
    down vote

    favorite












    I'm collecting file logs from two different applications. I have 2 custom logs defined in Azure Log Analytics:




    • CustomLog1_CL

    • CustomLog2_CL


    A sample message from both of these:




    • 2018-11-07 14:04:24.878 | 1 | Information | Caller.Type | some message logged from the application

    • 2018-11-08 07:30:00,002 [Thread] INFO Caller.Type - some other message logged from the application


    I'd like to create/use the same custom field in both of these:




    • SeverityLevel_CF


    However after extracting the SeverityLevel_CF field from CustomLog1_CL ( = Information), I can no longer extract the same field from CustomLog2_CL ( = INFO). Because of the message Custom field with this name already exists



    You can also see that I'm met with the same issue on CallerType_CF custom field and CustomMessage_CF.



    I'd like the name of this fields to be the same so that I can reuse the same search queries to aggregate logs by CallerType_CF, SeverityLevel_CF, CustomMessage_CF only iterating over different types of custom logs.



    Can I achieve anything as such?










    share|improve this question
























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I'm collecting file logs from two different applications. I have 2 custom logs defined in Azure Log Analytics:




      • CustomLog1_CL

      • CustomLog2_CL


      A sample message from both of these:




      • 2018-11-07 14:04:24.878 | 1 | Information | Caller.Type | some message logged from the application

      • 2018-11-08 07:30:00,002 [Thread] INFO Caller.Type - some other message logged from the application


      I'd like to create/use the same custom field in both of these:




      • SeverityLevel_CF


      However after extracting the SeverityLevel_CF field from CustomLog1_CL ( = Information), I can no longer extract the same field from CustomLog2_CL ( = INFO). Because of the message Custom field with this name already exists



      You can also see that I'm met with the same issue on CallerType_CF custom field and CustomMessage_CF.



      I'd like the name of this fields to be the same so that I can reuse the same search queries to aggregate logs by CallerType_CF, SeverityLevel_CF, CustomMessage_CF only iterating over different types of custom logs.



      Can I achieve anything as such?










      share|improve this question













      I'm collecting file logs from two different applications. I have 2 custom logs defined in Azure Log Analytics:




      • CustomLog1_CL

      • CustomLog2_CL


      A sample message from both of these:




      • 2018-11-07 14:04:24.878 | 1 | Information | Caller.Type | some message logged from the application

      • 2018-11-08 07:30:00,002 [Thread] INFO Caller.Type - some other message logged from the application


      I'd like to create/use the same custom field in both of these:




      • SeverityLevel_CF


      However after extracting the SeverityLevel_CF field from CustomLog1_CL ( = Information), I can no longer extract the same field from CustomLog2_CL ( = INFO). Because of the message Custom field with this name already exists



      You can also see that I'm met with the same issue on CallerType_CF custom field and CustomMessage_CF.



      I'd like the name of this fields to be the same so that I can reuse the same search queries to aggregate logs by CallerType_CF, SeverityLevel_CF, CustomMessage_CF only iterating over different types of custom logs.



      Can I achieve anything as such?







      azure-log-analytics






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked yesterday









      pijemcolu

      847923




      847923





























          active

          oldest

          votes











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














           

          draft saved


          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53203662%2fextracting-the-same-custom-field-accross-individual-custom-logs-custom-field%23new-answer', 'question_page');
          }
          );

          Post as a guest





































          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















           

          draft saved


          draft discarded



















































           


          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53203662%2fextracting-the-same-custom-field-accross-individual-custom-logs-custom-field%23new-answer', 'question_page');
          }
          );

          Post as a guest




















































































          Popular posts from this blog

          Schultheiß

          Verwaltungsgliederung Dänemarks

          Liste der Kulturdenkmale in Wilsdruff