Forum Discussion
Not getting logs from Custom Log source
Hi Team,
I created a txt file and called it in the Custom log. The txt file contains only 5 IPs separated by new line.
I am not getting those 5 IPs in RawData for that Custom log.
Do we need to do anything to enable reading the files via Custom log? My requirement is to make a list out of those IPs.
Please help.
Regards,
Mitesh Agrawal
1. 1st check, does your machine that contains the log file have a working MMA on it? You have data from that computer in the Heartbeat table?
2. In Log Analytics the table shows up in the Schema? I think the answer is no?
<name you used>_CL
e.g.
custom_CL | limit 10If the MMA isn't talking to Azure then its likely there is a network issue (often a proxy). Instructions will vary by product and setup to resolve this. Can you put the file on a server that is working?
- How are you ingesting it in?
- Hi, Please check my reply to Gary. I have explained what I am trying to achieve and also have attached the screenshots for better understanding.
MiteshAgrawal Another option you can try to is to use PowerShell to read the file and add the entries into the Log Analytics workspace. These links will help get you started.
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-collector-api
https://gallery.technet.microsoft.com/PowerShell-script-to-0823e09d
Hi GaryBushey ,
Thanks for your quick reply.
Please find the attached screenshots which clearly shows what I am trying to do.
I am following the below mentioned post to read data from txt files and looking for those entries in txt files in RawData under newly created Custom Log.
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-custom-logs
GaryBushey CliveWatson : Please help. I have also tried the below mentioned link but didn't get how to check the proxy issues.
I have the txt file in my local system with access to Azure. Custom Log creation was successful.
Regards,
Mitesh Agrawal
- CliveWatson
Microsoft
1. 1st check, does your machine that contains the log file have a working MMA on it? You have data from that computer in the Heartbeat table?
2. In Log Analytics the table shows up in the Schema? I think the answer is no?
<name you used>_CL
e.g.
custom_CL | limit 10If the MMA isn't talking to Azure then its likely there is a network issue (often a proxy). Instructions will vary by product and setup to resolve this. Can you put the file on a server that is working?
