application logs are not visible in azure sentinel

Question

While testing the azure sentinel application we are getting proper logs when we run azure function app manually(Test/Run).
But when azure sentinel triggers function app at specific interval some logs are not visible after some time triggered at specific time interval
For example the Function app is triggering at every hour for some hours it gives proper application logs but after that for some hours(until new data comes or we run the function app manually)interval logs are not visible though the content and data of logs are same for all the hours.

Answer 1

Hello @Rushit Ajudiya - Just to confirm, it sounds like you are using the feature described in the following doc?

• Use Azure Functions to connect Microsoft Sentinel to your data source

If so, it states that there will be a 20min delay until the logs data start to appear. However, if you are observing logs data irregularity caused by intermittent failures by the underlying function app, we'll need to investigate further with more info & insights into your setup.