AKS Log Analytics Workspace records the log for only 3 hours problem

I am not the provider, please allow me to share some ideas:

1. Inspect Data Collection Configuration

• Go to your AKS cluster in the Azure Portal.
• Navigate to Monitoring > Insights > Data Collection Settings.
• Ensure ContainerLogV2 is enabled and not scoped to specific hours or namespaces.

2. Check Agent Health

kubectl get pods -n kube-system | grep omsagent

kubectl logs <omsagent-pod-name> -n kube-system

Look for errors or restarts that might explain the gap.

3. Review Workspace Query Scope

In Log Analytics, run:

ContainerLogV2
| where TimeGenerated > ago(24h)
| summarize count() by bin(TimeGenerated, 1h)

This will show you hourly log volumes and help pinpoint gaps.

4. Validate Cluster Resource Usage

If your nodes are under memory or CPU pressure, logging agents may fail intermittently:

kubectl top nodes

and

kubectl top pods --all-namespaces