Reserved Common Fields in Log Analytics

I’ve recently been playing with some solution development and I’ve noticed something interesting.

When we are using the OMS Data Collector API we send data by creating json file. That json file is in simple format like this:

"property1": "value1",
"property2": "value2"
"property3": "value3",
"property4": "value4"

In this pseudo code property is the name of our fields. So when the data is uploaded to OMS the name for field property1 will turn to property1_s. Basically OMS adds suffix to the name of each field and this suffix represents the data type of the value for the field.

There are some exception though. For example if our property is called Computer that will not turn into Computer_s in Log Analytics. Basically the Computer field is a special one. Turned out there are more such fields actually and they are called Reserved Common Fields.

Continue reading “Reserved Common Fields in Log Analytics”


Moving Update Worker Server between OMS Workspaces

Recently I’ve been fairly occupied in writing the second edition of Inside Microsoft Operations Management Suite book but now that I’ve finished my chapters I can go back to writing some blog posts.

Update Workers are like Hybrid Workers but they are automatically registered by the Update Management solution. This creates a problem because there is no way to unregister such server unlike the Hybrid Workers which have PowerShell cmdlets installed locally on the server.

Fear not though. There is easy way to move Update Worker between different workspaces as long as you follow the steps:

Continue reading “Moving Update Worker Server between OMS Workspaces”

Storage Spaces Direct (S2D) Management Solution for OMS

I’ve decided to make you a Christmas present and developed a S2D solution for OMS.

Continue reading “Storage Spaces Direct (S2D) Management Solution for OMS”

Less Than 2000 Time Slices Error in OMS Log Analytics – Resolution

I’ve seen a lot of people having the following error appear when they do measurement functions in OMS Log Analytics Search:

Intervals for aggregate functions must result in less than 2000 time slices Unexpected ‘measure’ at position XX.


Continue reading “Less Than 2000 Time Slices Error in OMS Log Analytics – Resolution”

Less Than Thresholds in OMS View Designer

I saw that a few folks were struggling of expressing less than thresholds in Operations Management Suite View Designer. There’s more than one way to skin a cat. This is just idiom and I do not have anything against cats.

Continue reading “Less Than Thresholds in OMS View Designer”

Demystifying Operations Management Suite (#MSOMS) Webinar on 25th of October

I will be doing a webinar organized by Savision on 25th of October. You can register and find the details here. Hurry and join me.

Double Heartbeat Events in OMS Log Analytics

I was testing the new Agent Health solution in OMS and I’ve noticed that I have two Heartbeat events generated at the same time for the same computer but having different values for SCAgentChannel field. At first I thought it was some kind of bug related that this server is connected to SCOM management group and the MG is connected to OMS but also the server has direct connection to Internet. Continue reading “Double Heartbeat Events in OMS Log Analytics”