Eventlogs entry for Microsoft Monitor Agent

Verone Espiritu 1 Reputation point
2021-10-12T22:46:54.333+00:00

I noticed that MMA agent is not sending logs to Log Analytics for couple of hours and upon checking, the service was up and running. We performed a restart in MMA and was able to get the logs. Is there a way to identify if MMA agent is not sending logs/events to Log Analytics even if the agent service is up and running.? If so, is it written in event or sys logs that I can check?

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,812 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AnuragSingh-MSFT 20,106 Reputation points
    2021-10-13T10:10:53.72+00:00

    Hi @Verone Espiritu

    Welcome to Microsoft Q&A! Thanks for posting the question.

    I would suggest setting Heartbeat alert for the VMs being monitored so that you may get alerted when the VM has not sent heartbeat to the workspace in a while. Heartbeats are sent by MMA agent every minute to the connected LogAnalytics workspace. You can get more details about it here.

    On the VM/machine with MMA agent installed, the Operations Manager event logs under "Applications and Services Logs" in Event Viewer can help you identify errors being reported by agent itself, if any. You can also check the Application logs under "Windows Logs" in Event Viewer to check any other error (if the MMA agent or related
    MontoringHost.exe process might be crashing etc.)

    You may refer to this link for more details on Troubleshooting issues with Log Analytics (MMA) agent.

    ---
    Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.