General availability: Azure Monitor Logs, custom log API and ingestion-time transformations
Published date: November 30, 2022
A new set of capabilities is now available in Azure Monitor Logs allowing you to fully customize the shape of the data you ingest, as well as a new API to completely ingest custom data! With these new features, you will be able to add a custom ingestion-time transformation to data following into Azure Monitor Logs. These transformations can be used to set up ingestion-time extraction of fields and parsing of complex logs, obfuscation of sensitive data, removal of unneeded fields or even dropping full events for cost control, and many more advanced possibilities.
Not only will you be able to apply these transformations to data collected through Diagnostic Settings, AMA and MMA agents, Sentinel Connectors, and many others, but you will also be able to completely custom data you send to our new custom logs API. Aside from being able to specify an ingestion-time transformation on data you send to this new API, you will also now be able to explicitly define the schema for your custom table (including support for dynamic data structures) and take advantage of AAD authentication and ARM RBAC management!
Please read the Data Collection documentation page to learn more.