Articles → MICROSOFT AZURE → Collect Syslog Data From Linux Machines To Azure Log Analytics

Collect Syslog Data From Linux Machines To Azure Log Analytics

In this article, we will collect syslog data from Linux machines to Azure Log analytics.

Steps

To collect the syslog data in the log analytics, we will work on the following steps: -

Create a virtual machine
Create a log analytics workspace and connect the virtual machine
Enable syslog in Azure portal
Enable syslog in Linux virtual machine
Output

So, let’s get started.

Create A Virtual Machine

First, create a virtual machine.

Picture showing the virtual machine created in Azure portal

Click to Enlarge

Create A Log Analytics Workspace And Connect The Virtual Machine

Second step is to create a log analytics workspace and connect the virtual machine with the log analytics workspace.

Enable Syslog In Azure Portal

For enabling the syslog in the Azure portal, click on the "Agents configuration" in the log analytics workspace. The "Agents configuration" screen will appear.

Click on the "+ Add facility" button.

Picture showing the + Add facility button in Agent Configuration

Click to Enlarge

A row is inserted. Add 2 facilities i.e., "kern" and "auth".

Picture showing 2 facilities added in Agent Configuration screen

Click to Enlarge

Click on the "Apply" button to save the changes.

Enable Syslog In Linux Virtual Machine

Once the syslog is enabled in the Azure portal, enable the syslog in the Linux virtual machine.

Output

Query the log analytics using the following query: -

Syslog

You will get the following output: -

Picture showing the output of Syslog query in log analytics

Click to Enlarge

Posted By -	Karan Gupta

Posted On -	Saturday, July 16, 2022

Query/Feedback

Your Email Id		**

Subject		*

Query/Feedback	Characters remaining 250	**