Share via

Export Azure VM logs to Storage blob

Metik 41 Reputation points
2021-12-02T12:47:44.81+00:00

Hi,

I would like to transfer all VM logs and metrics to Storage blob. This can be done if you navigate to VM > Diagnostic settings > Enable guest-level monitoring + choosing storage account.
Unfotunatelly I am unable to see any .json logs related to that VM on chosen storage account.
What I want is to have a logs on a storage blob to transfer them to local SIEM.

What am I doing wrong?

BR

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
9,018 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Manu Philip 20,206 Reputation points MVP Volunteer Moderator
    2021-12-02T15:02:23.433+00:00

    You can check the logs in storage account tables by using a an Azure Storage Explorer. You may export the data from there too
    154534-image.png

    If you are not seeing the data by any reason try a re-install of the agent.

    1. Remove the agent from Diagnostics Settings>Agent?Remove agent
    2. Delete the folder indie the VM: C:\WindowsAzure\Logs\Plugins\Microsoft.Azure.Diagnostics.IaaSDiagnostics
    3. Re enable the agent
    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.