New data is not ingested in custom log analytics table after the initial load.

Nikolay Hristozov 1

Hi guys,

I have set up a data ingestion script, which is loading JSON data exported from Azure Resource Graph and ingested through Data collection endpoint/Data collection rule to a custom log analytics table via REST API post method. The problem is, that after an initial load of some records, when I try to post new ones to the table, they are not appearing. The patch method of the command is returning Not found 404. Any idea why this might be happening?

Ryan Hill 26,141 Reputation points Microsoft Employee

2023-06-06T02:26:25.24+00:00

Just to confirm, you followed steps similarly to what's doc'd on Logs Ingestion API in Azure Monitor. Is everything good on the app registration piece being used to for API call? Does the same API call work outside of your script, i.e., Invoke-RestMethod -Uri $uri -Method "Post" -Body $body -Headers $headers from your CLI?
Christophe Humbert 101 Reputation points

2023-06-06T08:41:03.2366667+00:00

Sorry wrong
Ryan Hill 26,141 Reputation points Microsoft Employee

2023-06-08T15:27:17.25+00:00

@Christophe Humbert are you experiencing the same issue? If so, can you elaborate on the setup you're using? Can you share the script you're using?
Christophe Humbert 101 Reputation points

2023-06-08T16:14:04.4366667+00:00

Sorry no I had a similar issue on Policy Event not being ingested from an Azure Function but I solved my issue

and I started commenting here but was wrong thread and I did found the way to delete comment altogether

Best
Ryan Hill 26,141 Reputation points Microsoft Employee

2023-06-09T16:10:59.4833333+00:00

Cool, thanks for letting us know @Christophe Humbert

@Nikolay Hristozov just circling back to see if you can provide some additional context so we can better assist.