Understanding data types and events in Azure Monitor
When you query logs in Azure Monitor (or, specifically, a Log Analytics workspace), you may realize that the logs themselves are presented as objects containing various properties. These properties are later presented as columns containing data represented by different data types. Inside these logs, you may find the following types:
- Strings
- Numbers
- Logical values
- Objects
Depending on the data source, the available columns and types will differ. For example, you can compare collected data to documents from NoSQL databases. Under the hood, data sent to a Log Analytics workspace is stored in separate tables, which may but don’t have to share the same schema. Tables can be created by you at any time – this approach is used when defining custom logs, which we’ll describe in the next section.
Using custom logs
When you want to create a new log table for Azure Log Analytics, you need...
