Skip to content

Commit 60dee36

Browse files
committed
fix
1 parent ae97ab5 commit 60dee36

File tree

1 file changed

+4
-7
lines changed

1 file changed

+4
-7
lines changed

articles/azure-monitor/agents/data-collection-text-log.md

Lines changed: 4 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.date: 04/08/2022
77
---
88

99
# Collect text and IIS logs with Azure Monitor agent (preview)
10-
This articles describes how to configure the collection of file-based text logs, including logs generated by IIS on Windows computers, with the [Azure Monitor agent](azure-monitor-agent-overview.md). This feature uses a [data collection rule](../essentials/data-collection-rule-overview.md) that you can use to define the structure of the log file and its target table.
10+
This article describes how to configure the collection of file-based text logs, including logs generated by IIS on Windows computers, with the [Azure Monitor agent](azure-monitor-agent-overview.md). Many applications log information to text files instead of standard logging services such as Windows Event log or Syslog.
1111

1212
> [!NOTE]
1313
> This feature is currently in public preview and isn't completely implemented in the Azure portal. This tutorial uses Azure Resource Manager templates for steps that can't yet be performed with the portal.
@@ -26,12 +26,11 @@ The log file must meet the following criteria to be collected by this feature:
2626
- Each entry in the log file must be delineated with an [ISO 8601 formatted](https://www.iso.org/standard/40874.html) time stamp or an end of line.
2727
- The log file must not allow circular logging, log rotation where the file is overwritten with new entries, or the file is renamed and the same file name is reused for continued logging.
2828

29-
##
3029

3130
## Steps to collect text logs
3231
The steps to configure log collection are as follows. The detailed steps for each are provided in the sections below:
3332

34-
1. Create a new table in your workspace to receive the collected data.
33+
1. Create a new table in your workspace to receive the collected data. (not required for IIS logs)
3534
2. Create a data collection endpoint for the Azure Monitor agent to connect.
3635
3. Create a data collection rule to define the structure of the log file and destination of the collected data.
3736
4. Create association between the data collection rule and the agent collecting the log file.
@@ -170,13 +169,11 @@ The [data collection rule (DCR)](../essentials/data-collection-rule-overview.md)
170169
171170
:::image type="content" source="../logs/media/tutorial-ingestion-time-transformations-api/build-custom-template.png" lightbox="../logs/media/tutorial-ingestion-time-transformations-api/build-custom-template.png" alt-text="Screenshot that shows portal blade to build template in the editor.":::
172171
173-
3. Paste on of the Resource Manager templates below into the editor and then change the following values:
174-
175-
You may choose to modify the following details in the DCR defined in this template:
172+
3. Paste one of the Resource Manager templates below into the editor and then change the following values:
176173
177174
- `streamDeclarations`: Defines the columns of the incoming data. This must match the structure of the log file.
178175
- `filePatterns`: Specifies the location and file pattern of the log files to collect. This defines a separate pattern for Windows and Linux agents.
179-
- `transformKql`: Specifies a [transformation](../logs/../essentials/data-collection-rule-transformations.md) to apply to the incoming data before it's sent to the workspace. Since data collection rules for Azure Monitor agent don't yet support transformations, this value will always be `source`.
176+
- `transformKql`: Specifies a [transformation](../logs/../essentials/data-collection-rule-transformations.md) to apply to the incoming data before it's sent to the workspace. Data collection rules for Azure Monitor agent don't yet support transformations, so this value should currently be `source`.
180177
181178
182179
4. Click **Save**.

0 commit comments

Comments
 (0)