locked
Difference between workspace data sources RRS feed

  • General discussion

  • Hello,

    I've enabled diagnostics on a vm and I've selected a new storage.

    In Log Analytics I can through Workspace sources add among others

    • Virtual machine (Connect my VM)
    • Storage (connect to my diagnostics share for my VM)
    • Azure resources (Connect my VM)

    Within all of these I can enable and connect a datasource which is my VM.

    What is the difference between adding my VM through these?

    Friday, December 21, 2018 2:34 PM

All replies

  • Hi,

    Virtual Machines and Azure resources are the same. Just Azure resources contains other resources that you can connect to Log Analytics besides Virtual Machines. For those two options Azure Log Analytics agent is installed on them and in Log Analytics workspace you have to configure the data sources that you want to get out of computers. For Storage option you will have to configure your Azure VM to send specific logs to Storage account. This is done via VM diagnostic extension. Once those logs are send to the storage account you can attach that storage account to Log Analytics. Log Analytics picks those logs at certain interval. This method is old way to get logs from VMs so I would advise you to choose the option with the Log Analytics agent.

    Mark this reply as answer if it was useful.

    Monday, January 7, 2019 8:04 AM