适用于：✔️ Linux VM ✔️ Windows VM
原始 KB 数： 3137442
本文列出了Microsoft 支持部门故障排除期间收集的 Microsoft Azure IaaS VM 日志和诊断信息。
同意后，Microsoft 支持部门将从 Azure IaaS 虚拟机（VM）收集文件，以解决问题。 这些文件将包括常见的日志文件、配置文件、诊断信息、系统生成的事件日志和调试日志。
日志集合列表
Microsoft 支持部门尝试仅收集对方案进行故障排除所需的数据。 本部分列出了在 VM 方案中的故障排除过程中可能从 VM 收集的完整文件集。
Windows IaaS VM 磁盘的文件
除了基本分区数据、文件系统格式、操作系统版本和注册表项设置之外，有关 Windows VM 的信息还包括下面列出的文件，这些设置对于正确运行远程桌面连接至关重要。
可能为 Windows IaaS VM 磁盘收集的文件
| /AzureData/CustomData.bin |
|---|
| /Packages/Plugins///config.txt |
| /Packages/Plugins///HandlerEnvironment.json |
| /Packages/Plugins///HandlerManifest.json |
| /Packages/Plugins///PackageInformation.txt |
| /Packages/Plugins///RuntimeSettings/*.settings |
| /Packages/Plugins///Status/*.status |
| /Packages/Plugins///Status/HeartBeat.Json |
| /Packages/Plugins/ESET。FileSecurity/*/agent_version.txt |
| /Packages/Plugins/ESET。FileSecurity/*/extension_version.txt |
| /Packages/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics//.config |
| /Packages/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics/*/AnalyzerConfigTemplate.xml |
| /packages/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics/*/Logs/DiagnosticsPlugin.log |
| /Packages/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics//schema/wad.json |
| /Packages/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics/*/StatusMonitor/ApplicationInsightsPackagesVersion.json |
| /Packages/Plugins/Microsoft.Azure.RecoveryServices.VMSnapshot/*/SeqNumber.txt |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/Microsoft.WindowsAzure.Storage.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/AsmExtensionMonitoringConfig.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/Monitoring/agent/Extensions/AzureSecurityPack/ASM。Azure.OSBaseline.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/Monitoring/agent/Extensions/AzureSecurityPack/AsmExtensionSecurityPackStartupConfig.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/Monitoring/agent/Extensions/AzureSecurityPack/AsmScan.log |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/Monitoring/agent/Extensions/AzureSecurityPack/AsmScannerConfiguration.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/Monitoring/agent/Extensions/AzureSecurityPack/Azure.Common.scm.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/Monitoring/agent/Extensions/AzureSecurityPack/SecurityPackStartup.log |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/Monitoring/agent/Extensions/AzureSecurityPack/SecurityScanLoggerManifest.man |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/AgentStandardEvents.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/AgentStandardEventsMin.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/AgentStandardExtensions.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/AntiMalwareEvents.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/MonitoringEwsEvents.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/MonitoringEwsEventsCore.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/MonitoringEwsRootEvents.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/MonitoringStandardEvents.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/MonitoringStandardEvents2.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/MonitoringStandardEvents3.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/SecurityStandardEvents.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/SecurityStandardEvents2.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring//Monitoring/agent/initconfig//Standard/SecurityStandardEvents3.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/Monitoring/agent/MonAgent-Pkg-Manifest.xml |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/MonitoringAgentCertThumbprints.txt |
| /Packages/Plugins/Microsoft.Azure.Security.Monitoring/*/MonitoringAgentScheduledService.txt |
| /Packages/Plugins/Microsoft.Azure.ServiceFabric.ServiceFabricNode/*/InstallUtil.InstallLog |
| /Packages/Plugins/Microsoft.Azure.ServiceFabric.ServiceFabricNode/*/Service/current.config |
| /Packages/Plugins/Microsoft.Azure.ServiceFabric.ServiceFabricNode/*/Service/InfrastructureManifest.template.xml |
| /Packages/Plugins/Microsoft.Azure.ServiceFabric.ServiceFabricNode/*/Service/ServiceFabricNodeBootstrapAgent.InstallLog |
| /Packages/Plugins/Microsoft.Azure.ServiceFabric.ServiceFabricNode/*/Service/ServiceFabricNodeBootstrapAgent.InstallState |
| /Packages/Plugins/Microsoft.Compute.BGInfo/*/BGInfo.def.xml |
| /Packages/Plugins/Microsoft.Compute.BGInfo/*/config.bgi |
| /Packages/Plugins/Microsoft.Compute.BGInfo/*/emptyConfig.bgi |
| /Packages/Plugins/Microsoft.Compute.BGInfo/*/PluginManifest.xml |
| /Packages/Plugins/Microsoft.Powershell.DSC/*/DSCVersion.xml |
| /Packages/Plugins/Microsoft.Powershell.DSC//DSCWork/.dpx |
| /Packages/Plugins/Microsoft.Powershell.DSC//DSCWork/.dsc |
| /Packages/Plugins/Microsoft.Powershell.DSC//DSCWork/.log |
| /Packages/Plugins/Microsoft.Powershell.DSC/*/DSCWork/HotfixInstallInProgress.dsc |
| /Packages/Plugins/Microsoft.Powershell.DSC/*/DSCWork/PreInstallDone.dsc |
| /Packages/Plugins/Microsoft.SqlServer.Management.SqlIaaSAgent/*/config.txt |
| /Packages/Plugins/Microsoft.SqlServer.Management.SqlIaaSAgent/*/HandlerEnvironment.json |
| /Packages/Plugins/Microsoft.SqlServer.Management.SqlIaaSAgent/*/HandlerManifest.json |
| /Packages/Plugins/Microsoft.SqlServer.Management.SqlIaaSAgent/*/PackageDefinition.xml |
| /Packages/Plugins/Microsoft.SqlServer.Management.SqlIaaSAgent//RuntimeSettings/.settings |
| /Packages/Plugins/Microsoft.SqlServer.Management.SqlIaaSAgent//Status/.status |
| /Packages/Plugins/Microsoft.SqlServer.Management.SqlIaaSAgent/*/Status/HeartBeat.Json |
| /Program Files/Microsoft SQL Server//MSSQL/Log/.* |
| /unattend.xml |
| /Windows/debug/DCPROMO。日志 |
| /Windows/debug/dcpromoui.log |
| /Windows/debug/mrt.log |
| /Windows/debug/netlogon.log |
| /Windows/debug/NetSetup.LOG |
| /Windows/debug/PASSWD。日志 |
| /Windows/Inf/netcfg*.*etl |
| /Windows/Inf/setupapi.dev.log |
| /Windows/黑豹/FastCleanup/setupact.log |
| /Windows/Panther/setupact.log |
| /Windows/Panther/setuperr.log |
| /Windows/Panther/unattend.xml |
| /Windows/Panther/UnattendGC/setupact.log |
| /Windows/Panther/WaSetup.log |
| /Windows/Panther/WaSetup.xml |
| /Windows/Setup/State/state.ini |
| /Windows/System32/config/SOFTWARE |
| /Windows/System32/config/SYSTEM |
| /Windows/System32/Sysprep/ActionFiles/Generalize.xml |
| /Windows/System32/Sysprep/ActionFiles/Respecialize.xml |
| /Windows/System32/Sysprep/ActionFiles/Specialize.xml |
| /Windows/System32/Sysprep/Panther/IE/setupact.log |
| /Windows/System32/Sysprep/Panther/IE/setuperr.log |
| /Windows/System32/Sysprep/Panther/setupact.log |
| /Windows/System32/Sysprep/Panther/setuperr.log |
| /Windows/System32/Sysprep/Sysprep_succeeded.tag |
| /Windows/System32/winevt/Logs/Application.evtx |
| /Windows/System32/winevt/Logs/Application.evtx |
| /Windows/System32/winevt/Logs/MicrosoftAzureRecoveryServices-Replication.evtx |
| /Windows/System32/winevt/Logs/Microsoft-ServiceFabric%4Admin.evtx |
| /Windows/System32/winevt/Logs/Microsoft-ServiceFabric%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-ServiceFabric-Lease%4Admin.evtx |
| /Windows/System32/winevt/Logs/Microsoft-ServiceFabric-Lease%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-WindowsAzure-Diagnostics%4Bootstrapper.evtx |
| /Windows/System32/winevt/Logs/Microsoft-WindowsAzure-Diagnostics%4GuestAgent.evtx |
| /Windows/System32/winevt/Logs/Microsoft-WindowsAzure-Diagnostics%4Heartbeat.evtx |
| /Windows/System32/winevt/Logs/Microsoft-WindowsAzure-Diagnostics%4Runtime.evtx |
| /Windows/System32/winevt/Logs/Microsoft-WindowsAzure-Status%4GuestAgent.evtx |
| /Windows/System32/winevt/Logs/Microsoft-WindowsAzure-Status%4Plugins.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-CAPI2%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-DSC%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-Kernel-PnP%4Configuration.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-Kernel-PnPConfig%4Configuration.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-NdisImPlatform%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-NetworkLocationWizard%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-NetworkProfile%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-NetworkProvider%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-NlaSvc%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-RemoteDesktopServices-RemoteDesktopSessionManager%4Admin.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-RemoteDesktopServices-SessionServices%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-ServerManager%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-SmbClient%4Connectivity.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-SMBClient%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-SMBServer%4Connectivity.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-SMBServer%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TCPIP%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TerminalServices-PnPDevices%4Admin.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TerminalServices-PnPDevices%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TerminalServices-RDPClient%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TerminalServices-SessionBroker-Client%4Admin.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-TerminalServices-SessionBroker-Client%4Operational.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-UserPnp%4DeviceInstall.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-Windows 防火墙高级安全性%4ConnectionSecurity.evtx |
| /Windows/System32/winevt/Logs/Microsoft-具有高级安全性的 Windows-Windows 防火墙%4Firewall.evtx |
| /Windows/System32/winevt/Logs/Microsoft-Windows-WindowsUpdateClient%4Operational.evtx |
| /Windows/System32/winevt/Logs/Security.evtx |
| /Windows/System32/winevt/Logs/Setup.evtx |
| /Windows/System32/winevt/Logs/System.evtx |
| /Windows/System32/winevt/Logs/System.evtx |
| /Windows/System32/winevt/Logs/Windows Azure.evtx |
| /WindowsAzure/config/*.xml |
| /WindowsAzure/Logs/AggregateStatus/aggregatestatus*.json |
| /WindowsAzure/Logs/AppAgentRuntime.log |
| /WindowsAzure/Logs/MonitoringAgent.log |
| /WindowsAzure/Logs/Plugins///CommandExecution.log |
| /WindowsAzure/Logs/Plugins///Heartbeat.log |
| /WindowsAzure/Logs/Plugins///Install.log |
| /WindowsAzure/Logs/Plugins///Update.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics///Configuration/Checkpoint.txt |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics///Configuration/MaConfig.xml |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics///Configuration/MonAgentHost.*.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics/*/DiagnosticsPlugin.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.Diagnostics.IaaSDiagnostics/*/DiagnosticsPluginLauncher.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.RecoveryServices.VMSnapshot//IaaSBcdrExtension.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.Security.IaaSAntimalware/*/AntimalwareConfig.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.Security.Monitoring/*/AsmExtension.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.ServiceFabric.ServiceFabricNode//FabricMSIInstall.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.ServiceFabric.ServiceFabricNode/*/InfrastructureManifest.xml |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.ServiceFabric.ServiceFabricNode/*/TempClusterManifest.xml |
| /WindowsAzure/Logs/Plugins/Microsoft.Azure.ServiceFabric.ServiceFabricNode//VCRuntimeInstall.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Compute.BGInfo//BGInfo.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Compute.JsonADDomainExtension/*/ADDomainExtension.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Compute.VMAccessAgent/*/JsonVMAccessExtension.log |
| /WindowsAzure/Logs/Plugins/Microsoft.EnterpriseCloud.Monitoring.MicrosoftMonitoringAgent/*/0.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Powershell.DSC//DscExtensionHandler.log |
| /WindowsAzure/Logs/Plugins/Microsoft.Powershell.DSC//DSCLOG.json |
| /WindowsAzure/Logs/Plugins/Microsoft.SqlServer.Management.SqlIaaSAgent//CommandExecution.log |
| /WindowsAzure/Logs/Plugins/Symantec.SymantecEndpointProtection/*/sepManagedAzure.txt |
| /WindowsAzure/Logs/Plugins/TrendMicro.DeepSecurity.TrendMicroDSA//.log |
| /WindowsAzure/Logs/SqlServerLogs/。 |
| /WindowsAzure/Logs/Telemetry.log |
| /WindowsAzure/Logs/TransparentInstaller.log |
| /WindowsAzure/Logs/WaAppAgent.log |
Linux IaaS VM 磁盘的文件
除了基本分区数据、磁盘空间、文件系统格式以及 Linux 分发名称和版本之外，有关 Linux VM 的信息还包括下面列出的文件。 由于 Linux 分发版存在差异，因此下面列出的所有文件不太可能出现在单个 VM 上。
可能为 Linux IaaS VM 磁盘收集的文件
| /etc/hostname |
|---|
| /boot/grub*/grub.c* |
| /boot/grub*/menu.lst |
| /etc/network/interfaces |
| /etc/network/interfaces.d/*.cfg |
| /etc/sysconfig/iptables |
| /etc/sysconfig/network |
| /etc/sysconfig/network/ifcfg-eth* |
| /etc/sysconfig/network/routes |
| /etc/sysconfig/network-scripts/ifcfg-eth* |
| /etc/sysconfig/network-scripts/route-eth* |
| /etc/sysconfig/SuSEfirewall2 |
| /etc/ufw/ufw.conf |
| /var/lib/dhcp/dhclient.eth0.leases |
| /var/log/cloud-init* |
| /var/log/dpkg* |
| /var/log/kern* |
| /var/log/rsyslog* |
| /var/log/sa/sar* |
| /var/log/syslog* |
| /var/log/yum* |
| /etc/udev/rules.d |
可以为 Linux IaaS VM 磁盘列出的目录
| /etc/udev/rules.d |
|---|
| /var/log/sa |
FreeBSD VM 磁盘的文件
除了基本分区数据、文件系统格式和操作系统版本之外，有关 FreeBSD VM 的信息还包括下面列出的文件。
可能为 FreeBSD VM 磁盘收集的文件
| /boot/loader.conf |
|---|
| /etc/*-release |
| /etc/dhclient.conf |
| /etc/fstab |
| /etc/networks |
| /etc/nsswitch.conf |
| /etc/rc.conf |
| /etc/resolv.conf |
| /etc/ssh/ssh_host_key_ |
| /etc/ssh/sshd_config |
| /etc/syslog.conf |
| /etc/waagent.conf |
| /var/lib/waagent/*.xml |
| /var/lib/waagent//config/.settings |
| /var/lib/waagent//status/.status |
| /var/lib/waagent/ExtensionsConfig.*.xml |
| /var/lib/waagent/provisioned |
| /var/log/auth* |
| /var/log/azure///* |
| /var/log/boot* |
| /var/log/dmesg* |
| /var/log/messages* |
| /var/log/secure* |
| /var/log/waagent* |
可以为 F** reeBSD VM 磁盘列出的目录
| /etc/rc.d |
|---|
| /var/lib/waagent |
| /var/log |
联系我们寻求帮助
如果你有任何疑问或需要帮助，请创建支持请求或联系 Azure 社区支持。 你还可以将产品反馈提交到 Azure 反馈社区。