Forum Discussion
Ashok42
Apr 20, 2020Copper Contributor
AzureDiagnostics table scema not found in LA
Trying to ingest diagnostics data and configure alerts for Loadbalancers and Application gateway. Enabled diagnostics data for a load balancer. But when i try to query the log, do not find AzureDiagnostics table at all.
- CliveWatson
Microsoft
It can take 15min+ for the first log to appear. Do you have read only or greater access, in case you are excluded from that table?
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-access
- Ashok42Copper Contributor
- CliveWatson
Microsoft
Is it possible there is a RBAC rule that prevents you seeing that Table? https://techcommunity.microsoft.com/t5/azure-sentinel/table-level-rbac-in-azure-sentinel/ba-p/965043
Have you made sure the data is ticked and its going to the workspace you think?Is the resource active and running so that it will generated log data?
- Ashok42Copper Contributor
Thanks for the quick response CliveWatson
Its been more than 6 hours without any data after enabling. OK, it can be understandable that sometimes data ingestion might got delayed with different reasons. But i wonder why the 'AzureDiagnostics' table doesn't exist at all ? Schema table for 'AzureDiagnostics' should atleast exist with zero data by default,right?