So, I successfully configured the export of logs and metrics from azure to sumo following this instruction (https://help.sumologic.com/03Send-Data/Collect-from-Other-Data-Sources/Azure_Blob_Storage).
Due to the fact that this template sends all data and in Sumo I exceed the data limit per day - there is a need to filter the data that coming from azure.
So, I tried to modify one of the features that comes with the ARM template. You can see it on screenshot below.
I did get rid of some data, but for some reason it caused a very large growth of data in sumo.
How i need to filter out of logs and metrics by message contains?
Please sign in to leave a comment.