which types of logs is missing through agent in azure log analytics workspace

Question

which types of logs is missing through agent in azure log analytics workspace

Answer 1

Also answered in https://learn.microsoft.com/en-us/answers/questions/1194705/which-logs-that-agent-cant-collect-in-log-analytic

Answer 2

@Abhishek Dane , can you please add more context to the question? I would suggest adding sample scenario, observation or specific requirement that you may have, to help us understand the question further.

The following information should add some more understanding to the question:

1. Depending on the type of agent you use (Legacy Log Analytics Agent or the newer Azure Monitoring Agent), you can configure it to collect many types of logs. If you are using LA agent, you cannot collect security event log and audit event logs from SQL Server from source MSSQLSERVER. For more information, see Collect Windows event log data sources with Log Analytics agent (old agent)
2. For default set of recommended monitoring using Azure Monitor Agent, you may also consider using VM Insights. It enables monitoring of the VM with some default set of rules to give you an overall view of VM Health.

If you have specific logs that you are unable to collect using the Azure Monitor agent, please let me know and I would try to help you find alternative methods to collect those logs.

Please let me know if you have any questions.