You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| Performance | Azure Monitor Metrics (Public preview)<sup>1</sup> - Insights.virtualmachine namespace<br>Log Analytics workspace - [Perf](/azure/azure-monitor/reference/tables/perf) table | Numerical values measuring performance of different aspects of operating system and workloads |
75
75
| Windows event logs (including sysmon events) | Log Analytics workspace - [Event](/azure/azure-monitor/reference/tables/Event) table | Information sent to the Windows event logging system |
76
-
| Syslog | Log Analytics workspace - [Syslog](/azure/azure-monitor/reference/tables/syslog)<sup>2</sup> table | Information sent to the Linux event logging system. [Colllect syslog with Azure Monitor Agent](data-collection-syslog.md)|
76
+
| Syslog | Log Analytics workspace - [Syslog](/azure/azure-monitor/reference/tables/syslog)<sup>2</sup> table | Information sent to the Linux event logging system. [Collect syslog with Azure Monitor Agent](data-collection-syslog.md)|
77
77
| Text logs and Windows IIS logs | Log Analytics workspace - custom table(s) created manually |[Collect text logs with Azure Monitor Agent](data-collection-text-log.md)|
Copy file name to clipboardExpand all lines: articles/azure-monitor/agents/azure-monitor-agent-troubleshoot-linux-vm-rsyslog.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,7 +19,7 @@ Here's how AMA collects syslog events:
19
19
> [!NOTE]
20
20
> AMA uses local persistency by default, all events received from `rsyslog` / `syslog-ng` are queued in `/var/opt/microsoft/azuremonitoragent/events` if they fail to be uploaded.
21
21
22
-
## Rsyslog data not uploaded due to Full Disk space issue on AMA Linux Agent
22
+
## Rsyslog data not uploaded due to full disk space issue on Azure Monitor Linux Agent
23
23
24
24
### Symptom
25
25
**Syslog data is not uploading**: When inspecting the error logs at `/var/opt/microsoft/azuremonitoragent/log/mdsd.err`, you'll see entries about *Error while inserting item to Local persistent store…No space left on device* similar to the following snippet:
@@ -31,7 +31,7 @@ Here's how AMA collects syslog events:
31
31
### Cause
32
32
Linux AMA buffers events to `/var/opt/microsoft/azuremonitoragent/events` prior to ingestion. On a default Linux AMA install, this directory will take ~650MB of disk space at idle. The size on disk will increase when under sustained logging load. It will get cleaned up about every 60 seconds and will reduce back to ~650 MB when the load returns to idle.
33
33
34
-
### Confirming the issue of Full Disk
34
+
### Confirming the issue of full disk
35
35
The `df` command shows almost no space available on `/dev/sda1`, as shown below:
36
36
37
37
```
@@ -85,7 +85,7 @@ If you're sending a high log volume through rsyslog, consider modifying the defa
85
85
```
86
86
2.`sudo systemctl restart rsyslog`
87
87
88
-
## Issue: AMA Event Buffer is Filling Disk
88
+
## Issue: Azure Monitor Linux Agent Event Buffer is Filling Disk
89
89
If you observe the `/var/opt/microsoft/azuremonitor/events` directory growing unbounded (10 GB or higher) and not reducing in size, [file a ticket](#file-a-ticket) with **Summary** as 'AMA Event Buffer is filling disk' and **Problem type** as 'I need help configuring data collection from a VM'.
Copy file name to clipboardExpand all lines: articles/azure-monitor/agents/data-collection-syslog.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,7 +14,7 @@ Syslog is an event logging protocol that's common to Linux. You can use the Sysl
14
14
15
15

16
16
17
-

17
+

18
18
19
19
The following facilities are supported with the Syslog collector:
20
20
* auth
@@ -71,7 +71,7 @@ A data collection rule is an Azure resource that allows you to define the way d
71
71
72
72
1. Select **Add data source**.
73
73
1. For **Data source type**, select **Linux syslog**.
74
-
:::image type="content" source="../../sentinel/media/forward-syslog-monitor-agent/create-rule-data-source.png" alt-text="Screenshot of page to select data source type and minimum log level":::
74
+
:::image type="content" source="../../sentinel/media/forward-syslog-monitor-agent/create-rule-data-source.png" alt-text="Screenshot of page to select data source type and minimum log level.":::
75
75
1. For **Minimum log level**, leave the default values **LOG_DEBUG**.
0 commit comments