Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,812 questions
Logs not visible in Azure function app monitor
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 67%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Rushit Ajudiya
146
Reputation points
We have a schedule cron time expression of 15 minutes of timer trigger function app. At each trigger we ingest some amount of data into sentinel from total 2,75,00,000 records. While ingesting this data we are unable to see some of the logs in azure function app monitor though function app was triggered at that time as logs are available in the traces table of application insights. So is this the issue from azure sentinel?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 59%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
SnehaAgrawal-MSFT 18,366 Reputation points2022-05-19T10:22:42.807+00:00 Thanks for reaching here! If I have understood right you are using Azure Function Apps trying to connect Microsoft Sentinel to your data source's REST API to pull in logs, If so could please validate connectivity as it may take up to 20 minutes until your logs start to appear in Log Analytics.
Suggest you to check this official document on configuring Microsoft Sentinel for using Azure Function Apps and look for if all steps followed.
Also ensure that you have required permissions and credentials before using Azure Functions to connect Microsoft Sentinel to your data source and pull its logs into Microsoft Sentinel.
Let us know.
Sign in to comment