Unable to leverage Auxiliary log table with Text or Json ingestion

Mehboob Ahmad 0 Reputation points
2024-11-22T17:24:34+00:00

Hi, I have followed all the steps from this article https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-log-text?tabs=portal , and am able to ingest data into 'basic' logs. However if I try to use an 'Auxiliary' log table as destination, it errors out saying '{"code":"InvalidPayload","message":"Data collection rule is invalid","details":[{"code":"InvalidDataFlow","target":"properties.dataFlows[0]","message":"Stream (Custom-TextAux_CLRawData) cannot be transformed.Transformation not supported for Log analytics Auxiliary table destination xx-xx-xxxx"}]}' . The documentations for Auxiliary logs states that text/json as well as APi are supported methods (https://learn.microsoft.com/en-us/azure/azure-monitor/logs/create-custom-table-auxiliary) , but all seem to use transformation of some kind. How can one ingest data into an Auxiliary log table?

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,340 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,172 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.