Problem was that Azure Sentinel didn't track any changes to *.csv file. After there was generated new file, based on my custom log settings everything come to Log Analytics.
Later I parsed this data and everything is fine.
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hello,
We configure Azure Sentinel and wanted to send custom *.csv log files from Linux VM. I installed MMA (OMS) agent on linux VM then i created custom logs by adding sample .csv file and configured it for "/root/server/.csv" location.
After some time I run my created custom_CL and there are no entries. Data from linux VM is not delivered to log analytics workspace.
We done everything based on documentation:
https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-custom-logs
What could be the cause?
Format used - yyyy-MM-ddTHH:mm:ssK
Problem was that Azure Sentinel didn't track any changes to *.csv file. After there was generated new file, based on my custom log settings everything come to Log Analytics.
Later I parsed this data and everything is fine.