You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/logs/data-collection-troubleshoot.md
+13-13Lines changed: 13 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,16 +2,21 @@
2
2
title: Troubleshoot why data is no longer being collected in Azure Monitor
3
3
description: Steps to take if data is no longer being collected in Log Analytics workspace in Azure Monitor.
4
4
ms.topic: conceptual
5
-
ms.date: 07/25/2023
5
+
ms.date: 08/06/2024
6
6
---
7
7
8
8
# Troubleshoot why data is no longer being collected in Azure Monitor
9
-
This article provides guidance to detect when data collection in Azure Monitor stops and steps you can take to determine and correct the causes.
9
+
This article explains how to detect when data collection in Azure Monitor stops and details steps you can take to address data collection issues.
10
10
11
11
> [!IMPORTANT]
12
12
> If you're troubleshooting data collection for a scenario that uses a data collection rule (DCR) such as Azure Monitor agent or Logs ingestion API, see [Monitor and troubleshoot DCR data collection in Azure Monitor](../essentials/data-collection-monitor.md) for additional troubleshooting information.
13
13
14
-
## Data collection status
14
+
## Data collection stopped because of the Log Analytics workspace daily cap
15
+
16
+
The [daily cap](daily-cap.md) limits the amount of data that a Log Analytics workspace can collect in a day. When the daily cap is reached, data collection stops until the reset time. You can either wait for collection to automatically restart, or increase the daily data volume limit.
17
+
18
+
### How to check the data collection status
19
+
15
20
When data collection in a Log Analytics workspace stops, an event with a type of **Operation** is created in the workspace. Run the following query to check whether you're reaching the daily limit and missing data:
16
21
17
22
```kusto
@@ -22,16 +27,11 @@ When data collection stops, the **OperationStatus** is **Warning**. When data co
22
27
23
28
To be notified when data collection stops, use the steps described in the [Alert when daily cap is reached](daily-cap.md#alert-when-daily-cap-is-reached) section. To configure an e-mail, webhook, or runbook action for the alert rule, use the steps described in [create an action group](../alerts/action-groups.md).
24
29
25
-
## Daily cap was reached
26
-
The [daily cap](daily-cap.md) limits the amount of data that a Log Analytics workspace can collect in a day. If the daily cap is reached, then data collection will stop until the reset time. Either wait for collection to automatically restart, or increase the daily data volume limit.
27
-
28
-
29
-
## Legacy free pricing tier
30
-
If your Log Analytics workspace is on the [legacy Free pricing tier](cost-logs.md#legacy-pricing-tiers) and has collected more than 500 MB of data in a day, data collection stops for the rest of the day. Wait until the following day for collection to automatically restart, or change to a paid pricing tier.
31
-
30
+
## Daily ingestion limitation in the legacy free pricing tier
31
+
If your Log Analytics workspace is in the [legacy Free pricing tier](cost-logs.md#legacy-pricing-tiers) and has collected more than 500 MB of data in a day, data collection stops for the rest of the day. Wait until the following day for collection to automatically restart, or change to a paid pricing tier.
32
32
33
33
## Workspace reached the data ingestion volume rate
34
-
The [default ingestion volume rate limit](../service-limits.md#log-analytics-workspaces)for data sent from Azure resources using diagnostic settings is approximately 6 GB/min per workspace. This is an approximate value because the actual size can vary between data types, depending on the log length and its compression ratio. This limit doesn't apply to data that's sent from agents or the [Data Collector API](data-collector-api.md).
34
+
The [default ingestion volume rate limit](../service-limits.md#log-analytics-workspaces) for data sent from Azure resources using diagnostic settings is approximately 6 GB/min per workspace. This is an approximate value because the actual size can vary between data types, depending on the log length and its compression ratio. This limit doesn't apply to data that's sent from agents or the [Data Collector API](data-collector-api.md).
35
35
36
36
If you send data at a higher rate to a single workspace, some data is dropped, and an event is sent to the **Operation** table in your workspace every 6 hours while the threshold continues to be exceeded. If your ingestion volume continues to exceed the rate limit or you are expecting to reach it sometime soon, you can request an increase to your workspace by sending an email to [email protected] or by opening a support request.
37
37
@@ -51,9 +51,9 @@ Your Azure subscription could be in a suspended state for one of the following r
51
51
- Monthly spending limit reached (such as on an MSDN or Visual Studio subscription)
52
52
53
53
54
-
## Limits summary
54
+
## Other Log Analytics workspace limitations
55
55
56
-
There are additional Log Analytics limits, some of which depend on the Log Analytics pricing tier. These are documented at [Azure subscription and service limits, quotas, and constraints](../service-limits.md#log-analytics-workspaces).
56
+
There are other Log Analytics limits, some of which depend on the Log Analytics pricing tier. These are documented at [Azure subscription and service limits, quotas, and constraints](../service-limits.md#log-analytics-workspaces).
0 commit comments