Experiencing Data Gaps Issue in Azure portal for Log Analytics - 03/01 - Resolved
Published Mar 01 2020 05:47 AM 1,828 Views
Final Update: Friday, 13 March 2020 12:15 UTC


We've confirmed that all systems are back to normal with no customer impact as of 03/12, 15:00 UTC. Our logs show the incident started on 03/01, 10:30 UTC and that during the 11 days 4 hours 30 mins that it took to resolve the issue some customers using Log Analytics in East US region may have noticed missing or delayed data for newly created monitoring solutions. Additionally, you may have also noticed missing or delayed data after making configuration changes to your existing monitoring solutions.This issue would only impact monitoring solutions configured for Linux resources, Windows monitoring solutions are not impacted.


Engineers determined that this was a recurrence of the previous issue occurring between 02/13, 01:00 UTC and 02/27, 23:15 UTC. A subset of Log Analytics customers, who leveraged Update Management solutions were affected subsequently - Engineers deployed a fix which mitigated this impact.

  • Root Cause: As part of the on boarding process for Log Analytics, customer resources are configured with a monitoring agent. In this case, a recent update introduced a configuration change that led to the OMS Linux agent (required to monitor Linux resources) calling an incorrect region endpoint when trying to collect data to send to the upstream ingestion service.
  • Incident Timeline: 11 days 4 Hours & 30 minutes - 03/01, 10:30 UTC through 03/12, 15:00 UTC
We understand that customers rely on Azure Log Analytics as a critical service and apologize for any impact this incident caused.
-Syed

Update: Friday, 13 March 2020 10:09 UTC

We are aware of issues within Log Analytics and are actively investigating. Some customers continue to experience missing or delayed data for newly created monitoring solutions. Additionally, customers may also notice missing or delayed data after making configuration changes to their existing monitoring solutions. This issue would only impact monitoring solutions configured for Linux resources, Windows monitoring solutions are not impacted.

  • Work Around: There are 2 workarounds to resolve this issue:

      1) Via Azure Portal, this is for Azure Machines:

             - Login to Azure Portal. Navigate to Effected Workspace.

             - Click on "Virtual Machines" in "Workspace Data Sources" on the blade left side.

             - Select the impacted Virtual Machine. Disconnect the machine and reconnect it back. With this OMSAgent will get re-registered  and will resolve the issue

       2) Via terminal, this is for On-Prem Azure Machines:

             - Connect to the impacted Linux machine.

             - Purge the installation of OMSAgent using below command. This command should be executed with root privileges.

                           sudo "/opt/microsoft/omsagent/bin/uninstall" P

             - Re-Onboard the Linux machine to the Log Analytics using steps mentioned in this url (https://github.com/microsoft/OMS-Agent-for-Linux#quick-install-guide

  • Next Update: Before 03/13 11:30 UTC
-Syed

Update: Thursday, 12 March 2020 12:47 UTC

We are aware of issues within Log Analytics and are actively investigating. Some customers continue to experience missing or delayed data for newly created monitoring solutions. Additionally, customers may also notice missing or delayed data after making configuration changes to their existing monitoring solutions. This issue would only impact monitoring solutions configured for Linux resources, Windows monitoring solutions are not impacted.

  • Work Around: There are 2 workarounds to resolve this issue:

      1) Via Azure Portal, this is for Azure Machines:

             - Login to Azure Portal. Navigate to Effected Workspace.

             - Click on "Virtual Machines" in "Workspace Data Sources" on the blade left side.

             - Select the impacted Virtual Machine. Disconnect the machine and reconnect it back. With this OMSAgent will get re-registered  and will resolve the issue

       2) Via terminal, this is for On-Prem Azure Machines:

             - Connect to the impacted Linux machine.

             - Purge the installation of OMSAgent using below command. This command should be executed with root privileges.

                           sudo "/opt/microsoft/omsagent/bin/uninstall" P

             - Re-Onboard the Linux machine to the Log Analytics using steps mentioned in this url (https://github.com/microsoft/OMS-Agent-for-Linux#quick-install-guide

  • Next Update: Before 03/13 13:00 UTC
-Syed

Update: Thursday, 11 March 2020 05:51 UTC

We are aware of issues within Log Analytics and are actively investigating. Some customers continue to experience missing or delayed data for newly created monitoring solutions. Additionally, customers may also notice missing or delayed data after making configuration changes to their existing monitoring solutions. This issue would only impact monitoring solutions configured for Linux resources, Windows monitoring solutions are not impacted.

  • Work Around: There are 2 workarounds to resolve this issue:

      1) Via Azure Portal, this is for Azure Machines:

             - Login to Azure Portal. Navigate to Effected Workspace.

             - Click on "Virtual Machines" in "Workspace Data Sources" on the blade left side.

             - Select the impacted Virtual Machine. Disconnect the machine and reconnect it back. With this OMSAgent will get re-registered  and will resolve the issue

       2) Via terminal, this is for On-Prem Azure Machines:

             - Connect to the impacted Linux machine.

             - Purge the installation of OMSAgent using below command. This command should be executed with root privileges.

                           sudo "/opt/microsoft/omsagent/bin/uninstall" P

             - Re-Onboard the Linux machine to the Log Analytics using steps mentioned in this url (https://github.com/microsoft/OMS-Agent-for-Linux#quick-install-guide

  • Next Update: Before 03/12 11:30 UTC
-Syed

Update: Tuesday, 10 March 2020 11:50 UTC

We are aware of issues within Log Analytics and are actively investigating. Some customers continue to experience missing or delayed data for newly created monitoring solutions. Additionally, customers may also notice missing or delayed data after making configuration changes to their existing monitoring solutions. This issue would only impact monitoring solutions configured for Linux resources, Windows monitoring solutions are not impacted.

  • Work Around: There are 2 workarounds to resolve this issue:

      1) Via Azure Portal, this is for Azure Machines:

             - Login to Azure Portal. Navigate to Effected Workspace.

             - Click on "Virtual Machines" in "Workspace Data Sources" on the blade left side.

             - Select the impacted Virtual Machine. Disconnect the machine and reconnect it back. With this OMSAgent will get re-registered  and will resolve the issue

       2) Via terminal, this is for On-Prem Azure Machines:

             - Connect to the impacted Linux machine.

             - Purge the installation of OMSAgent using below command. This command should be executed with root privileges.

                           sudo "/opt/microsoft/omsagent/bin/uninstall" P

             - Re-Onboard the Linux machine to the Log Analytics using steps mentioned in this url (https://github.com/microsoft/OMS-Agent-for-Linux#quick-install-guide

  • Next Update: Before 03/11 11:30 UTC
-Santhosh

Update: Monday, 09 March 2020 12:19 UTC

We are aware of issues within Log Analytics and are actively investigating. Some customers continue to experience missing or delayed data for newly created monitoring solutions. Additionally, customers may also notice missing or delayed data after making configuration changes to their existing monitoring solutions. This issue would only impact monitoring solutions configured for Linux resources, Windows monitoring solutions are not impacted.

  • Work Around: There are 2 workarounds to resolve this issue:

      1) Via Azure Portal, this is for Azure Machines:

             - Login to Azure Portal. Navigate to Effected Workspace.

             - Click on "Virtual Machines" in "Workspace Data Sources" on the blade left side.

             - Select the impacted Virtual Machine. Disconnect the machine and reconnect it back. With this OMSAgent will get re-registered  and will resolve the issue

       2) Via terminal, this is for On-Prem Azure Machines:

             - Connect to the impacted Linux machine.

             - Purge the installation of OMSAgent using below command. This command should be executed with root privileges.

                           sudo "/opt/microsoft/omsagent/bin/uninstall" P

             - Re-Onboard the Linux machine to the Log Analytics using steps mentioned in this url (https://github.com/microsoft/OMS-Agent-for-Linux#quick-install-guide

  • Next Update: Before 03/10 11:30 UTC
-Syed

Update: Monday, 02 March 2020 10:24 UTC

We are aware of issues within Log Analytics and are actively investigating. Some customers continue to experience missing or delayed data for newly created monitoring solutions. Additionally, customers may also notice missing or delayed data after making configuration changes to their existing monitoring solutions. This issue would only impact monitoring solutions configured for Linux resources, Windows monitoring solutions are not impacted.

  • Work Around: There are 2 workarounds to resolve this issue:
  •       1) Via Azure Portal, this is for Azure Machines:

                 - Login to Azure Portal. Navigate to Effected Workspace.

                 - Click on "Virtual Machines" in "Workspace Data Sources" on the blade left side.

                 - Select the impacted Virtual Machine. Disconnect the machine and reconnect it back. With this OMSAgent will get re-registered  and will resolve the issue

           2) Via terminal, this is for On-Prem Azure Machines:

                 - Connect to the impacted Linux machine.

                 - Purge the installation of OMSAgent using below command. This command should be executed with root privileges.

                            sudo "/opt/microsoft/omsagent/bin/uninstall" P

                 - Re-Onboard the Linux machine to the Log Analytics using steps mentioned in this url (https://github.com/microsoft/OMS-Agent-for-Linux#quick-install-guide

  • Next Update: Before 03/03 10:30 UTC
-Syed

Initial Update: Sunday, 01 March 2020 13:42 UTC

We are aware of issues within Log Analytics and are actively investigating. Some customers may experience missing or delayed data for newly created monitoring solutions. Additionally, customers may also notice missing or delayed data after making configuration changes to their existing monitoring solutions. This issue would only impact monitoring solutions configured for Linux resources, Windows monitoring solutions are not impacted.
  • Work Around: None
  • Next Update: Before 03/02 02:00 UTC
We are working hard to resolve this issue and apologize for any inconvenience.
-Mohini

Version history
Last update:
‎Mar 16 2020 04:49 AM
Updated by: