question

VeroneEspiritu-9819 avatar image
0 Votes"
VeroneEspiritu-9819 asked AnuragSingh-MSFT commented

Eventlogs entry for Microsoft Monitor Agent

I noticed that MMA agent is not sending logs to Log Analytics for couple of hours and upon checking, the service was up and running. We performed a restart in MMA and was able to get the logs. Is there a way to identify if MMA agent is not sending logs/events to Log Analytics even if the agent service is up and running.? If so, is it written in event or sys logs that I can check?

azure-monitor
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

AnuragSingh-MSFT avatar image
0 Votes"
AnuragSingh-MSFT answered AnuragSingh-MSFT commented

Hi @VeroneEspiritu-9819

Welcome to Microsoft Q&A! Thanks for posting the question.

I would suggest setting Heartbeat alert for the VMs being monitored so that you may get alerted when the VM has not sent heartbeat to the workspace in a while. Heartbeats are sent by MMA agent every minute to the connected LogAnalytics workspace. You can get more details about it here.

On the VM/machine with MMA agent installed, the Operations Manager event logs under "Applications and Services Logs" in Event Viewer can help you identify errors being reported by agent itself, if any. You can also check the Application logs under "Windows Logs" in Event Viewer to check any other error (if the MMA agent or related
MontoringHost.exe process might be crashing etc.)

You may refer to this link for more details on Troubleshooting issues with Log Analytics (MMA) agent.


Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @VeroneEspiritu-9819, I wanted to check if you had a chance to review my answer above. Please let me know if you have any queries or concerns.
Please 'Accept as answer' if it helped so that it can help others in the community looking for help on similar topics.

0 Votes 0 ·