Forum Discussion
Slee6004
Oct 22, 2023Brass Contributor
How to redirect performance logs to another Azure log analytic workspace
Dear members,
I am new to Azure monitor/log analytic workspace and I'm in the process of configuring it. Initially, we believed that having two LAWs would suffice for our business requirements, and we put significant effort into adjusting Azure Policies exclusions to make it work. However, we didn't succeed in that approach.
After gaining a deeper understanding of LAW, we decided to using a single LAW and have most of our resources report to it. To achieve this, we cleaned up Azure policies and direct DCRs to point to this unified LAW. The issue we currently face is that the specific group of VMs continues to send performance data to the outdated LAW, and we can't identify where to make the necessary changes. We have triple checked all levels of management groups of Azure policies or the remaining active DCRs yet still no luck.
All of these VMs have the AMA installed. Is there a need to update the AMA, which we may be unaware of? We are running out of ideas on where to adjust the settings so that we can consolidate all the logs into this single LAW. We would greatly appreciate any suggestions or recommendations from forum members! Thank you in advance for any help!
Sally
- John_HayesCopper ContributorHi
Just an obvious one - have you checked the Diagnostic Setitngs on the VM's themselves? They may have some custom setting to send logs to the other workspace.- Slee6004Brass ContributorThanks for your feedback. We did check on that and it's configured with correct data. We may mess up Azure policies while cleaning up/consolidating to a new LAW. Not sure if we need to reinstall AMA to get the correct extension and/or get a new set of Azure policies to enforce new AMA installation. Any suggestions would be appreciated.