Skip to content

Commit be36da2

Browse files
Learn Build Service GitHub AppLearn Build Service GitHub App
authored andcommitted
Merging changes synced from https://github.com/MicrosoftDocs/SupportArticles-docs-pr (branch live)
2 parents 5532815 + 11a21d3 commit be36da2

16 files changed

+146
-434
lines changed

.openpublishing.redirection.json

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13801,6 +13801,41 @@
1380113801
"redirect_url": "/previous-versions/troubleshoot/sql/tools/error-you-run-sqlmaint-utility",
1380213802
"redirect_document_id": false
1380313803
},
13804+
{
13805+
"source_path": "support/azure/azure-monitor/activity-logs/config-export/centralized-configuration-of-activity-logs-to-event-hub.md",
13806+
"redirect_url": "/troubleshoot/azure/azure-monitor/welcome-azure-monitor"
13807+
}
13808+
,
13809+
{
13810+
"source_path": "support/azure/azure-monitor/activity-logs/config-export/exporting-directory-level-activity-logs-to-event-hub.md",
13811+
"redirect_url": "/troubleshoot/azure/azure-monitor/welcome-azure-monitor"
13812+
}
13813+
,
13814+
{
13815+
"source_path": "support/azure/azure-monitor/activity-logs/config-export/pushing-subscription-activity-logs-to-sentinel.md",
13816+
"redirect_url": "/troubleshoot/azure/azure-monitor/activity-logs/config-export/push-subscription-activity-logs-to-sentinel"
13817+
}
13818+
,
13819+
{
13820+
"source_path": "support/azure/azure-monitor/activity-logs/config-export/resolving-log-limit-issues-in-azure-function-apps.md",
13821+
"redirect_url": "/troubleshoot/azure/azure-monitor/welcome-azure-monitor"
13822+
}
13823+
,
13824+
{
13825+
"source_path": "support/azure/azure-monitor/activity-logs/config-export/understanding-and-managing-diagnostic-settings-retention.md",
13826+
"redirect_url": "/troubleshoot/azure/azure-monitor/welcome-azure-monitor"
13827+
}
13828+
,
13829+
{
13830+
"source_path": "support/azure/azure-monitor/activity-logs/config-export/understanding-and-transitioning-from-legacy-to-diagnostic-settings.md",
13831+
"redirect_url": "/troubleshoot/azure/azure-monitor/welcome-azure-monitor"
13832+
}
13833+
,
13834+
{
13835+
"source_path": "support/azure/azure-monitor/activity-logs/config-export/diagnostic-settings-transition-from-legacy-solutions.md",
13836+
"redirect_url": "/troubleshoot/azure/azure-monitor/welcome-azure-monitor"
13837+
}
13838+
,
1380413839
{
1380513840
"source_path": "support/sql/database-engine/install/windows/error-install-sql-server-2008-r2.md",
1380613841
"redirect_url": "/troubleshoot/sql/database-engine/install/windows/error-install-sql-server"

support/azure/azure-monitor/activity-logs/config-export/centralized-configuration-of-activity-logs-to-event-hub.md

Lines changed: 0 additions & 50 deletions
This file was deleted.

support/azure/azure-monitor/activity-logs/config-export/diagnostic-settings-transition-from-legacy-solutions.md

Lines changed: 0 additions & 87 deletions
This file was deleted.

support/azure/azure-monitor/activity-logs/config-export/exporting-directory-level-activity-logs-to-event-hub.md

Lines changed: 0 additions & 44 deletions
This file was deleted.
Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
---
2+
title: Troubleshoot Pushing Subscription Level Activity Logs to Sentinel
3+
description: Provides detailed instructions for pushing subscription activity logs to Sentinel.
4+
ms.date: 08/04/2025
5+
ms.reviewer: v-liuamson; v-gsitser; v-sisidhu
6+
ms.service: azure-monitor
7+
ms.custom: I can’t configure export of Activity Logs
8+
---
9+
10+
# Troubleshoot pushing subscription level Activity Logs to Sentinel
11+
12+
This article provides guidance for how to push subscription activity logs to Microsoft Sentinel by using Microsoft Azure Diagnostic Settings. This process is essential to monitor and analyze activity logs effectively.
13+
14+
Users might encounter challenges when they try to push subscription activity logs to Sentinel. This guide outlines the steps to configure Azure Diagnostic Settings to achieve seamless data transfer to Sentinel.
15+
16+
## Common issues and solutions
17+
18+
- **Issue**: Logs aren't appearing in Sentinel.
19+
- **Solution**: Make sure that the correct Log Analytics workspace is selected and that the diagnostic settings are correctly configured.
20+
21+
### Instructions to configure Azure Diagnostic Settings
22+
23+
1. Navigate to the Azure portal.
24+
25+
1. Open Diagnostic Settings:
26+
1. Go to the **Azure Monitor** section.
27+
1. On the menu, select **Diagnostic Settings**.
28+
29+
1. **Configure Diagnostic Settings**:
30+
1. Select the resource that you want to verify the logs for.
31+
1. Select **Edit Diagnostic Setting**.
32+
1. Review the diagnostic settings are set correctly.
33+
34+
1. **Select Log Analytics workspace**:
35+
1. Under **Destination details**, select **Log Analytics**.
36+
1. Verify the correct Log Analytics workspace is selected.
37+
38+
1. Review your settings, and select **Save** to apply the changes.
39+
40+
1. To verify the data transfer, run the following query in your Log Analytics workspace:
41+
42+
```plaintext
43+
AzureActivity | where SubscriptionId contains "<YourSubscriptionId>"
44+
```
45+
46+
1. Validate your [connector settings](/azure/sentinel/connect-services-diagnostic-setting-based#prerequisites).
47+
48+
## References
49+
50+
- [Azure Sentinel data connectors reference](/azure/sentinel/data-connectors-reference)
51+
- [Azure Monitor diagnostic settings](/azure/azure-monitor/platform/diagnostic-settings?tabs=CMD)
52+
- [Connect services through a diagnostic setting-based connector](/azure/sentinel/connect-services-diagnostic-setting-based#connect-via-a-diagnostic-setting-based-connector-managed-by-azure-policy)
53+
- [Time before telemetry gets to destination](/azure/azure-monitor/platform/diagnostic-settings#time-before-telemetry-gets-to-destination)
54+
55+
[!INCLUDE [azure-help-support](../../../../includes/azure-help-support.md)]

support/azure/azure-monitor/activity-logs/config-export/pushing-subscription-activity-logs-to-sentinel.md

Lines changed: 0 additions & 55 deletions
This file was deleted.

support/azure/azure-monitor/activity-logs/config-export/resolving-log-limit-issues-in-azure-function-apps.md

Lines changed: 0 additions & 43 deletions
This file was deleted.

0 commit comments

Comments
 (0)