Configuring Azure Virtual Machine to send application logs to a Log Analytics Workspace?

Question

We have set up a Log Analytics Workspace in Azure and are running an Azure Virtual Machine with "Windows Server 2022 Datacenter Azure Edition." One of our applications is hosted on this VM, and I would like to send its logs to the Log Analytics Workspace.

I believe this is achievable, but I’m not entirely sure about the exact steps required. Could someone please provide guidance or a step-by-step process for setting this up? Thank you in advance.

Answer 1

Hi @David Maryo ,
Welcome to Microsoft Q&A Forum, thank you for posting your query here!

Please follow the below steps in order to send the Azure Virtual Machine application logs to a Log Analytics Workspace

Step 1: Enable the Azure Monitor Agent

Azure Monitor Agent (AMA) is the recommended agent for collecting data from Azure resources.

In the Insights pane, choose the Log Analytics Workspace where you want to send the data and save the configuration, please find the screenshot below.

a) Click on Enable

b) Create a new DCR (Data collection Rule)

c) Provide DCR and send the data to Log Analytics Workspace

This document has step by step procedure
Refer: https://learn.microsoft.com/en-us/azure/azure-monitor/vm/tutorial-monitor-vm-enable-insights**

Note: VM insights collects performance data from the VM guest operating system, but it doesn't collect log data such as Windows event log or Syslog. Now that you have the machine monitored with Azure Monitor Agent, you can create another data collection rule to perform this collection.

Step 2: Configure Data Collection Rules (DCR)which data is collected and where it's sent.

Step 2: Configure Data Collection Rules (DCR)

Data Collection Rules (DCR) specify which data is collected and where it's sent.

Create a DCR:

• Create a DCR that sends guest performance data to Azure Monitor Metrics and log events to Azure Monitor Logs.
• View guest logs in Log Analytics.
• View guest metrics in metrics explorer.

This document has step by step procedure

Refer: https://learn.microsoft.com/en-us/azure/azure-monitor/vm/tutorial-monitor-vm-guest

Please let us know if you have any further queries. I’m happy to assist you further.   

Please do not forget to "Accept the answer” wherever the information provided helps you, this can be beneficial to other community members.