Log Monitor Feedback and Future Features

[lucillex]

Hi everyone! I'm Lucille, and I'm a PM on the Windows Container team working on Log Monitor.

Our team would love to hear from the community on how to improve Log Monitor. We are currently planning for the next versions of Log Monitor and would like to hear feedback.

Here are some guiding questions we would love to hear your thoughts on:

1. How are you currently using Log Monitor? What problem is it solving for you?
2. What issues are you facing surrounding Log Monitor?
3. What features would you like to see?

[mloskot]

1. How are you currently using Log Monitor? What problem is it solving for you?

In Docker images used to deploy custom web services:

CMD C:\LogMonitor.exe /Config C:\LogMonitorConfig.json C:\ServiceMonitor.exe My.Custom.Service

or just

CMD C:\LogMonitor.exe /Config C:\LogMonitorConfig.json

to monitor *.log files in configured location and stream out the log to container stdout.

2. What issues are you facing surrounding Log Monitor?

None.

3. What features would you like to see?

Setting to add log file name to every line streamed out

[israelvaldez]

How are you currently using Log Monitor?

ENTRYPOINT ["cmd", "/S", "/C", "powershell","-command", "./Scripts/RunIisSetup.ps1", "&&", "C:/LogMonitor/LogMonitor.exe", "ServiceMonitor.exe", "w3svc"]

What problem is it solving for you?

Be able to expose IIS Logs and custom logs from our IIS and Windows Services container images

What issues are you facing surrounding Log Monitor?

Should have more integration with Azure Container Insights, so that we could filter out logs for each type of log that we'd be exposing using a single config file, right now we get all logs in different lines with no details on how to separate them, our log files would have new names over time, for example: C:\logs\log-2022-11-16-001.txt and have a rollover functionality so what was mentioned in the previous post would make it almost possible to create kusto queries to filter out the data but would probably make it a more expensive query than a simple starts with, with the type of log that we're filtering, not the file name of where the log line is coming from

What features would you like to see?

Mentioned in the issues question

[Ketsueki2b]

Same for me: I wouldlike a native way to separate logs in order to categorize them. It could be specific headers in brackets (example: [Provider_Source]), separated objects or even files... I don't know, but something I could separate thanks to PowerShell from the host machine or just to have a better view from Admin Center (which already activates the timestamp parameter by default btw). Thanks!

[Ketsueki2b]

Something similar of what you did in the last update for the file provider/source could be nice for others providers/sources too: [Log File: LogFiles\W3SVC1\u_ex221125_x.log] ; That could help a lot to separate all logs as a quick and MVP solution. Thanks!

[lucillex]

@israelvaldez @Ketsueki2b Thanks for the feedback! I'm interested in if tagging the log source in Azure Monitor would help with filtering and categorizing logs?

We've also started a discussion around with supporting JSON outputs here that we would appreciate feedback on.

[paultjohnson]

FileMonitor v2.1 and 2.0

How are you currently using Log Monitor? What problem is it solving for you?
SHELL ["C:\LogMonitor\LogMonitor.exe", "powershell.exe"]
ENTRYPOINT Start-Service WMSVC; C:\ServiceMonitor.exe w3svc;
I am using LogMonitor to stream EventLogs to stdout in a Windows container for and IIS app.

What issues are you facing surrounding Log Monitor?
I am encountering an issue reported here:
#40
Which is currently closed and I can see the change applied from that ticket into source code for the exe I'm using.
The issue is the event log item contains "%2f" and doesn't get sent to stdout because of this error:
WARNING: Failed to render event log event. The event will not be processed. Error: 15029

What features would you like to see?
Send event log message containing "&2f" to stdout without manipulating the message contents?