[transator/azurelogs] Add support for the remaining activity logs categories by zmoog · Pull Request #44871 · open-telemetry/opentelemetry-collector-contrib

zmoog · 2025-12-10T09:08:57Z

Description

Includes support for all the remaining seven Activity log categories:

Administrative
Alert
Autoscale
Policy
Resource Health
Security
Service Health

The PR is built on top of the PR #43220 that added support for the Recommendation log category.

It applies the same philosophy:

Capture the recurring data structures as much as possible (e.g., Identity).
Map a field when it's definitely useful; don't map a field if in doubt—we can still add it later.

Note for reviewers: I'm not 100% on the field naming convention, so your feedback and insight are really needed here.

Link to tracking issue

N/A

Testing

I collected some sample logs from actual Azure and anonymized a little bit for the following log categories:

Administrative
Policy
ResourceHealth
ServiceHealth

However, I wasn't able to get actual log events for the following categories, so I inferred them from samples available in the Azure docs (which seems to use the Log Analytics Workspace format):

Alert
Autoscale
Security

Please pay extra attention when reviewing these categories, and please let me know if you're able to share some actual samples from Azure.

Documentation

N/A

pkg/translator/azurelogs/README.md

zmoog · 2025-12-10T14:35:18Z

Hey @thompson-tomo, thank you for kicking off the review! All the suggestions I see make sense. What are the best resources to get started with naming conventions in semconv, so I can avoid making n00b choices?

thompson-tomo · 2025-12-10T14:48:11Z

No worries at all. A good place to start would be https://opentelemetry.io/docs/specs/semconv/general/naming/ & https://opentelemetry.io/docs/specs/semconv/how-to-write-conventions/ there are tasks to improve those docs. Also a good understanding can be gained by reviewing what is already defined.

The way I like to think during attribute naming is what is the item that is being described. That becomes the 2nd last namespace with the last being a property of the item you are capturing.

pkg/translator/azurelogs/README.md

zmoog · 2025-12-22T17:22:56Z

@constanca-m, @MikeGoldsmith, @atoulme, Could you take a look at this PR when you have a chance? 🙇

I also plan to port these log categories to extension/encoding/azureencodingextension when #44919 is merged.

zmoog · 2025-12-22T17:45:02Z

I also plan to port these log categories to extension/encoding/azureencodingextension when #44919 is merged.

While we're on the subject of the new extension/encoding/azureencodingextension extension, I think we should complete the set of Activity Log categories in the current pkg/translator/azurelogs package first.

It would be a better user experience to have all eight categories supported instead of just the one. Let me know if you feel differently!

constanca-m

The mapping looks very good! Just 2 questions about it

pkg/translator/azurelogs/README.md

pkg/translator/azurelogs/category_logs.go

constanca-m

Thanks Maurizio, I took a final look and all seems good

MikeGoldsmith

Yep, looks good to me.

zmoog · 2026-01-07T13:59:26Z

@atoulme, let me know if you think this PR needs changes whenever you have a moment 🙇

Includes support for: - Administrative - Alert - Autoscale - Policy - Resource Health - Security - Service Health # Conflicts: # pkg/translator/azurelogs/resourcelogs_to_logs.go # pkg/translator/azurelogs/testdata/recommendation/valid_1_expected.yaml

Co-authored-by: James Thompson <thompson.tomo@outlook.com>

Co-authored-by: Constança Manteigas <113898685+constanca-m@users.noreply.github.com>

azure.identity.identifier.name > user.name

zmoog · 2026-01-19T11:35:27Z

Hey @atoulme, sorry to bother you again, but I believe the PR is good to go for a final look whenever you have a moment! 🙇

ChrsMark · 2026-01-19T12:11:37Z

I'm going to remove the ready to merge label since we still need an approval from the PR's facilitator (or another approver): https://github.com/open-telemetry/opentelemetry-collector-contrib?tab=readme-ov-file#prs-and-reviews

zmoog · 2026-01-19T13:44:04Z

I'm going to remove the ready to merge label since we still need an approval from the PR's facilitator (or another approver): https://github.com/open-telemetry/opentelemetry-collector-contrib?tab=readme-ov-file#prs-and-reviews

Thanks for the clarification, @ChrsMark.

I don't really know what to do next to wrap up this PR, it has been open for more than a month.

I would love to complete the review of these changes before porting them to the new extension/azure_encoding.

ChrsMark · 2026-01-19T14:09:19Z

I'm going to remove the ready to merge label since we still need an approval from the PR's facilitator (or another approver): https://github.com/open-telemetry/opentelemetry-collector-contrib?tab=readme-ov-file#prs-and-reviews

Thanks for the clarification, @ChrsMark.

I don't really know what to do next to wrap up this PR, it has been open for more than a month.

I would love to complete the review of these changes before porting them to the new extension/azure_encoding.

What needs to happen here is to get an approval from the PR's facilitator (or another approver). You correctly pinged the PR's assigned approver at #44871 (comment) so let's give some time to Antoine to get to this. In case there is still delay feel free to raise this in CNCF slack (#otel-collector-dev channel).

FYI, I filed a PR to update the docs accordingly regarding the use of ready to merge label: #45474

atoulme

Looks better than before. Merging.

otelbot · 2026-01-21T18:51:30Z

Thank you for your contribution @zmoog! 🎉 We would like to hear from you about your experience contributing to OpenTelemetry by taking a few minutes to fill out this survey. If you are getting started contributing, you can also join the CNCF Slack channel #opentelemetry-new-contributors to ask for guidance and get help.

…oscale, Policy, Security, ServiceHealth, and ResourceHealth log categories. (#45699)  #### Description This PR brings over the remaining Activity log categories from `translator/azurelogs`, aligning this component with the changes made in #44871. New log categories: - Administrative - Alert - Autoscale - Policy - Security - ServiceHealth - ResourceHealth   #### Testing We added test cases for each category, leveraging the same log events found in translator/azurelogs for consistency.  #### Documentation  Added a section covering Identity (including its major subfields) along with dedicated sections for each new log category. --------- Co-authored-by: Cursor <cursoragent@cursor.com>

zmoog force-pushed the zmoog/pkg/translator/azurelogs/activitylogs-complete branch from e84b5d8 to f452454 Compare December 10, 2025 10:29

zmoog marked this pull request as ready for review December 10, 2025 10:29

zmoog requested review from a team and atoulme as code owners December 10, 2025 10:29

github-actions bot assigned mwear Dec 10, 2025

github-actions bot added the pkg/translator/azurelogs label Dec 10, 2025

github-actions bot requested review from MikeGoldsmith, constanca-m and cparkins December 10, 2025 10:29

ChrsMark added the waiting-for-code-owners label Dec 10, 2025

thompson-tomo reviewed Dec 10, 2025

View reviewed changes

kaiyan-sheng mentioned this pull request Dec 10, 2025

[transator/azurelogs] Add support for resource health & service health log category #44426

Closed

kaiyan-sheng reviewed Dec 10, 2025

View reviewed changes

pkg/translator/azurelogs/README.md Outdated Show resolved Hide resolved

zmoog force-pushed the zmoog/pkg/translator/azurelogs/activitylogs-complete branch from b2fb2a7 to 73b3ca0 Compare December 18, 2025 19:06

thompson-tomo reviewed Dec 18, 2025

View reviewed changes

zmoog force-pushed the zmoog/pkg/translator/azurelogs/activitylogs-complete branch 2 times, most recently from c21d57f to 82a32e7 Compare December 22, 2025 17:18

constanca-m reviewed Dec 23, 2025

View reviewed changes

pkg/translator/azurelogs/README.md Outdated Show resolved Hide resolved

pkg/translator/azurelogs/README.md Outdated Show resolved Hide resolved

constanca-m reviewed Dec 23, 2025

View reviewed changes

pkg/translator/azurelogs/category_logs.go Show resolved Hide resolved

constanca-m approved these changes Dec 23, 2025

View reviewed changes

zmoog force-pushed the zmoog/pkg/translator/azurelogs/activitylogs-complete branch from 9f4c509 to 675cbfa Compare December 23, 2025 15:57

kaiyan-sheng approved these changes Dec 23, 2025

View reviewed changes

zmoog force-pushed the zmoog/pkg/translator/azurelogs/activitylogs-complete branch from 675cbfa to f6d4332 Compare December 29, 2025 14:33

MikeGoldsmith approved these changes Jan 6, 2026

View reviewed changes

zmoog and others added 10 commits January 7, 2026 14:59

Add change log entry

acb124d

Address linter objections

ab2a3b9

Apply suggestions from code review

f3e18b1

Co-authored-by: James Thompson <thompson.tomo@outlook.com>

Update mapping from code review

b651421

Apply suggestions from code review

453e243

Co-authored-by: James Thompson <thompson.tomo@outlook.com>

Apply review feedback

aaacb9e

Apply suggestions from code review

01743c0

Update pkg/translator/azurelogs/README.md

f493bf7

Co-authored-by: Constança Manteigas <113898685+constanca-m@users.noreply.github.com>

Update claims mapping

856f35d

azure.identity.identifier.name > user.name

Add missing azure.alert.webhook.uri field

e9eb91d

zmoog force-pushed the zmoog/pkg/translator/azurelogs/activitylogs-complete branch from f6d4332 to e9eb91d Compare January 7, 2026 13:59

thompson-tomo mentioned this pull request Jan 15, 2026

[extension/azure_encoding] Add processing for Application Gateway, Azure Messaging (ServiceBus and EventHub), Data Factory, FunctionApps and BlobStorage logs records #45254

Merged

constanca-m added ready to merge Code review completed; ready to merge by maintainers and removed waiting-for-code-owners labels Jan 19, 2026

ChrsMark removed the ready to merge Code review completed; ready to merge by maintainers label Jan 19, 2026

atoulme approved these changes Jan 21, 2026

View reviewed changes

atoulme merged commit fceb57b into open-telemetry:main Jan 21, 2026
229 checks passed

zmoog deleted the zmoog/pkg/translator/azurelogs/activitylogs-complete branch January 22, 2026 08:17

zmoog mentioned this pull request Jan 28, 2026

[extension/azure_encoding] Add support for Administrative, Alert, Autoscale, Policy, Security, ServiceHealth, and ResourceHealth log categories. #45699

Merged

Conversation

zmoog commented Dec 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Link to tracking issue

Testing

Documentation

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

zmoog commented Dec 10, 2025

Uh oh!

thompson-tomo commented Dec 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

zmoog commented Dec 22, 2025

Uh oh!

zmoog commented Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

constanca-m left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

constanca-m left a comment

Choose a reason for hiding this comment

Uh oh!

MikeGoldsmith left a comment

Choose a reason for hiding this comment

Uh oh!

zmoog commented Jan 7, 2026

Uh oh!

zmoog commented Jan 19, 2026

Uh oh!

ChrsMark commented Jan 19, 2026

Uh oh!

zmoog commented Jan 19, 2026

Uh oh!

ChrsMark commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

atoulme left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

otelbot bot commented Jan 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

zmoog commented Dec 10, 2025 •

edited

Loading

thompson-tomo commented Dec 10, 2025 •

edited

Loading

zmoog commented Dec 22, 2025 •

edited

Loading

ChrsMark commented Jan 19, 2026 •

edited

Loading