Currently in azure application insights we see under severityLevel the number of ther severity level and not the text like information, error,... Is it possible to show the severityLevel as a string.

"Serilog": {
"Using": [
    "Serilog.Sinks.ApplicationInsights"
],
"MinimumLevel": {
    "Default": "Debug",
    "Override": {
        "Microsoft": "Information"
    }
},
"WriteTo": [
    {
        "Name": "ApplicationInsights",
        "Args": {
            "restrictedToMinimumLevel": "Information",
            "telemetryConverter": "Serilog.Sinks.ApplicationInsights.Sinks.ApplicationInsights.TelemetryConverters.TraceTelemetryConverter, Serilog.Sinks.ApplicationInsights",
            "instrumentationKey": "key"
        }
    }
],
"Enrich": [
    "FromLogContext"
],
"Properties": {
    "Application": "Sample"
}
}

CodePudding user response：

The severity level is an enum, see the docs:

Critical 4
Critical severity level.

Error 3
Error severity level.

Information 1
Information severity level.

Verbose 0
Verbose severity level.

Warning 2
Warning severity level.

We can use this to create a kusto query:

let severities = datatable(severityLevel:int, severity:string)
[
   0, "Verbose",
   1, "Information",
   2, "Warning",
   3, "Error",
   4, "Critical",
];
traces
| join severities on severityLevel
| project timestamp, message, severity

CodePudding user response：

Ad hoc function, using let statement

// Sample generation. Not part of the solution
let traces = materialize(range i from 1 to 10 step 1 | project severityLevel = toint(rand(5)), Timestamp = ago(rand()*1d));
// Solution starts here
let getSeverityDescription = (severityLevel:int)
{
    dynamic(["Verbose", "Information", "Warning", "Error", "Critical"])[severityLevel]
};
traces
| extend SeverityDescription = getSeverityDescription(severityLevel)

Fiddle