Result from log-analytics query have new data fields...but no data

[cladic]

Since last May, 26th 2020 I noticed 85 new data fields when I execute a log-analytics query from AzureDiagnostics ( AZURE WAF component ) but neither one have a data.

The original data group have 61 data fields. Now we have a total of 146 data fields.

My questions:

• Where we can find any documentation about these NEW data fields ?
• And why they were created ? What is the goal of these new set of data fields ?

These are the new data fields:

CallerIPAddress
Caller_s
CorrelationId
DatabaseName_s
DurationMs
ElasticPoolName_s
EventName_s
JobId_g
Level
LogicalServerName_s
OperationVersion
ResultDescription
ResultSignature
ResultType
RunOn_s
RunbookName_s
StreamType_s
Tenant_g
_schema_s
clientInfo_s
code_s
conditions_None_s
conditions_destinationIP_s
conditions_destinationPortRange_s
conditions_protocols_s
conditions_sourceIP_s
conditions_sourcePortRange_s
correlation_actionTrackingId_g
correlation_clientTrackingId_s
direction_s
endTime_t
httpStatusCode_d
id_s
identity_claim_appid_g
identity_claim_http_schemas_microsoft_com_claims_authnmethodsreferences_s
identity_claim_http_schemas_microsoft_com_identity_claims_objectidentifier_g
identity_claim_http_schemas_microsoft_com_identity_claims_scope_s
identity_claim_http_schemas_xmlsoap_org_ws_2005_05_identity_claims_upn_s
identity_claim_ipaddr_s
isAccessPolicyMatch_b
macAddress_s
matchedConnections_d
primaryIPv4Address_s
priority_d
properties_enabledForDeployment_b
properties_enabledForDiskEncryption_b
properties_enabledForTemplateDeployment_b
properties_sku_Family_s
properties_sku_Name_s
properties_tenantId_g
query_hash_s
resource_actionName_s
resource_location_s
resource_originRunId_s
resource_resourceGroupName_s
resource_runId_s
resource_subscriptionId_g
resource_triggerName_s
resource_workflowId_g
resource_workflowName_s
resultDescription_ChildJobs_s
resultDescription_ErrorJobs_s
resultDescription_Summary_DurationInMinutes_d
resultDescription_Summary_DurationInMinutes_s
resultDescription_Summary_EndDateTimeUtc_s
resultDescription_Summary_EndDateTimeUtc_t
resultDescription_Summary_InitialRequiredUpdatesCount_d
resultDescription_Summary_InstallPercentage_d
resultDescription_Summary_MachineId_s
resultDescription_Summary_MachineName_s
resultDescription_Summary_RebootRequired_b
resultDescription_Summary_ScheduleName_s
resultDescription_Summary_StartDateTimeUtc_t
resultDescription_Summary_StatusDescription_s
resultDescription_Summary_Status_s
resultDescription_Summary_TotalUpdatesFailed_d
resultDescription_Summary_TotalUpdatesInstalled_d
startTime_t
status_s
subnetId_s
subnetPrefix_s
systemId_g
type_s
vnetResourceGuid_g
workflowId_s

[yonzhan]

add to S172

[mmyyrroonn]

@cladic I cannot find doc too. Let me invite service team.

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @sameergMS, @dadunl.

[navba-MSFT]

@cladic Apologies for the late reply. Could you please let me know the command that you have executed ? Are you still facing the same issue ? Awaiting your reply.