Azure Log Analytics not collected from Kubernetes cluster

Question

I am running a AKS Kubernetes cluster, and the logging is not visible anymore in the Log Analytics using a query.

The live logs from a pod are streaming correctly, so there is activity for sure.

Also, using kubectl it is working fine as well.

But I cannot fetch historical logs all of the sudden. It stopped yesterday and I cannot find out why. The query that normally returns something at all shows this message:

No results found from the last 24 hours

I am using kubernetes cluster 1.28.3.

Hope you can help!

Answer 1

Hello Cuebly,

Welcome to microsoft Q&A, Thankyou for posting your query here.

The below error might be the reason for the issue which is reenabled once you disabled and re enabled the monitoring and started working.

Error message "Error retrieving data":

While an AKS cluster is setting up for health and performance monitoring, a connection is established between the cluster and a Log Analytics workspace. A Log Analytics workspace is used to store all monitoring data for your cluster. This error might occur when your Log Analytics workspace has been deleted. Check if the workspace was deleted. If it was, reenable monitoring of your cluster with Container insights. Then specify an existing workspace or create a new one.

To reenable, disable monitoring for the cluster and enable Container insights again.

please find the error in the below Azure documentation.

https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-troubleshoot

Hope this answer is informatic ,If an answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!