Device logs not coming in to Workspace

Iron Contributor
  1. Create a Log Analytics Workspace

  2. Agent management I set Data Collection Rules, Basic and Select everything, Application, Security, System.

  3. Install the agent manually on my Windows 11 test device.

  4. Check so agent is running, also check Heartbeat in Logs in Workspace, I can see the device connected to the Workspace.

  5. Under LogManagment I only see Heartbeat and Usage I don't see Events.

  6. I check the test device Event viewer and I can see the events triggered.

  7. Nothing comes in to the workspace logs, I can pull nothing using Event or search * or time.

Anyone know why no logs are coming in?

0 Replies