You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/agents/data-collection-rule-azure-monitor-agent.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -29,15 +29,15 @@ To send data to Log Analytics, create the data collection rule in the **same reg
29
29
1. From the **Monitor** menu, select **Data Collection Rules**.
30
30
1. Select **Create** to create a new Data Collection Rule and associations.
31
31
32
-
[](media/data-collection-rule-azure-monitor-agent/data-collection-rules-updated.png#lightbox)
32
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rules-updated.png#lightbox)
33
33
34
34
1. Provide a **Rule name** and specify a **Subscription**, **Resource Group**, **Region**, and **Platform Type**.
35
35
36
36
**Region** specifies where the DCR will be created. The virtual machines and their associations can be in any subscription or resource group in the tenant.
37
37
38
38
**Platform Type** specifies the type of resources this rule can apply to. Custom allows for both Windows and Linux types.
39
39
40
-
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-basics-updated.png#lightbox)
40
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-basics-updated.png#lightbox)
41
41
42
42
1. On the **Resources** tab, add the resources (virtual machines, virtual machine scale sets, Arc for servers) to which to associate the data collection rule. The portal will install Azure Monitor Agent on resources that don't already have it installed, and will also enable Azure Managed Identity.
43
43
@@ -46,23 +46,23 @@ To send data to Log Analytics, create the data collection rule in the **same reg
46
46
47
47
If you need network isolation using private links, select existing endpoints from the same region for the respective resources, or [create a new endpoint](../essentials/data-collection-endpoint-overview.md).
48
48
49
-
[!Screenshot showing the Resources tab of the Data Collection Rules screen.](media/data-collection-rule-azure-monitor-agent/data-collection-rule-virtual-machines-with-endpoint.png)](media/data-collection-rule-azure-monitor-agent/data-collection-rule-virtual-machines-with-endpoint.png#lightbox)
49
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-virtual-machines-with-endpoint.png#lightbox)
50
50
51
51
1. On the **Collect and deliver** tab, select **Add data source** to add a data source and set a destination.
52
52
1. Select a **Data source type**.
53
53
1. Select which data you want to collect. For performance counters, you can select from a predefined set of objects and their sampling rate. For events, you can select from a set of logs and severity levels.
54
54
55
-
[!Screenshot of Azure portal form to select basic performance counters in a data collection rule.](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-basic-updated.png)](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-basic-updated.png#lightbox)
55
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-basic-updated.png#lightbox)
56
56
57
57
1. Select **Custom** to collect logs and performance counters that are not [currently supported data sources](azure-monitor-agent-overview.md#data-sources-and-destinations) or to [filter events using XPath queries](#filter-events-using-xpath-queries). You can then specify an [XPath](https://www.w3schools.com/xml/xpath_syntax.asp) to collect any specific values. See [Sample DCR](data-collection-rule-sample-agent.md) for an example.
58
58
59
-
[!Screenshot of Azure portal form to select custom performance counters in a data collection rule.](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-custom-updated.png)](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-custom-updated.png#lightbox)
59
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-custom-updated.png#lightbox)
60
60
61
61
1. On the **Destination** tab, add one or more destinations for the data source. You can select multiple destinations of the same or different types - for instance multiple Log Analytics workspaces (known as "multi-homing").
62
62
63
63
You can send Windows event and Syslog data sources can to Azure Monitor Logs only. You can send performance counters to both Azure Monitor Metrics and Azure Monitor Logs.
64
64
65
-
[!Screenshot of Azure portal form to add a data source in a data collection rule.](media/data-collection-rule-azure-monitor-agent/data-collection-rule-destination.png)](media/data-collection-rule-azure-monitor-agent/data-collection-rule-destination.png#lightbox)
65
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-destination.png#lightbox)
66
66
67
67
1. Select **Add Data Source** and then **Review + create** to review the details of the data collection rule and association with the set of virtual machines.
68
68
1. Select **Create** to create the data collection rule.
@@ -117,7 +117,7 @@ In Windows, you can use Event Viewer to extract XPath queries as shown below.
117
117
118
118
When you paste the XPath query into the field on the **Add data source** screen, (step 5 in the picture below), you must append the log type category followed by '!'.
119
119
120
-
[!Screenshot of steps in Azure portal showing the steps to create an XPath query in the Windows Event Viewer.](media/data-collection-rule-azure-monitor-agent/data-collection-rule-extract-xpath.png)](media/data-collection-rule-azure-monitor-agent/data-collection-rule-extract-xpath.png#lightbox)
120
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-extract-xpath.png#lightbox)
121
121
122
122
See [XPath 1.0 limitations](/windows/win32/wes/consuming-events#xpath-10-limitations) for a list of limitations in the XPath supported by Windows event log.
123
123
@@ -147,4 +147,4 @@ Examples of filtering events using a custom XPath:
147
147
148
148
- [Collect text logs using Azure Monitor agent.](data-collection-text-log.md)
149
149
- Learn more about the [Azure Monitor Agent](azure-monitor-agent-overview.md).
150
-
- Learn more about [data collection rules](../essentials/data-collection-rule-overview.md).
150
+
- Learn more about [data collection rules](../essentials/data-collection-rule-overview.md).
0 commit comments