You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/containers/container-insights-syslog.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -37,11 +37,11 @@ az aks enable-addons -a monitoring --enable-msi-auth-for-monitoring --enable-sys
37
37
38
38
Syslog data is stored in the [Syslog](/azure/azure-monitor/reference/tables/syslog) table in your Log Analytics workspace. You can create your own [log queries](../logs/log-query-overview.md) in [Log Analytics](../logs/log-analytics-overview.md) to analyze this data or use any of the [prebuilt queries](../logs/log-query-overview.md).
39
39
40
-
:::image type="content" source="media/container-insights-syslog/AzMon3.png" lightbox="media/container-insights-syslog/AzMon3.png" alt-text="Syslog query loaded in the query editor in the Azure Monitor Portal UI" border="false":::
40
+
:::image type="content" source="media/container-insights-syslog/AzMon3.png" lightbox="media/container-insights-syslog/AzMon3.png" alt-text="Screenshot of Syslog query loaded in the query editor in the Azure Monitor Portal UI." border="false":::
41
41
42
42
You can open Log Analytics from the **Logs** menu in the **Monitor** menu to access Syslog data for all clusters or from the AKs cluster's menu to access Syslog data for only that cluster.
43
43
44
-
:::image type="content" source="media/container-insights-syslog/AKS4.png" lightbox="media/container-insights-syslog/AKS4.png" alt-text="Query editor with Syslog query." border="false":::
44
+
:::image type="content" source="media/container-insights-syslog/AKS4.png" lightbox="media/container-insights-syslog/AKS4.png" alt-text="Screenshot of Query editor with Syslog query." border="false":::
45
45
46
46
### Sample queries
47
47
@@ -60,17 +60,17 @@ To modify the configuration for your Syslog collection, you modify the [data col
60
60
61
61
Select **Data Collection Rules** from the **Monitor** menu in the Azure portal.
62
62
63
-
:::image type="content" source="media/container-insights-syslog/DCR1.png" lightbox="media/container-insights-syslog/DCR1.png" alt-text="Data Collection Rules tab in the Azure Monitor portal UI" border="false":::
63
+
:::image type="content" source="media/container-insights-syslog/DCR1.png" lightbox="media/container-insights-syslog/DCR1.png" alt-text="Screenshot of Data Collection Rules tab in the Azure Monitor portal UI." border="false":::
64
64
65
65
Select your DCR and then **View data sources**. Select the **Linux Syslog** data source to view the Syslog collection details.
66
66
>[!NOTE]
67
67
> A DCR is created automatically when you enable syslog. The DCR follows the naming convention `MSCI-<WorkspaceRegion>-<ClusterName>`.
68
68
69
-
:::image type="content" source="media/container-insights-syslog/DCR3.png" lightbox="media/container-insights-syslog/DCR3.png" alt-text="Data Sources tab for Syslog data collection rule" border="false":::
69
+
:::image type="content" source="media/container-insights-syslog/DCR3.png" lightbox="media/container-insights-syslog/DCR3.png" alt-text="Screenshot of Data Sources tab for Syslog data collection rule." border="false":::
70
70
71
71
Select the minimum log level for each facility that you want to collect.
72
72
73
-
:::image type="content" source="media/container-insights-syslog/DCR4.png" lightbox="media/container-insights-syslog/DCR4.png" alt-text="Configuration panel for Syslog data collection rule" border="false":::
73
+
:::image type="content" source="media/container-insights-syslog/DCR4.png" lightbox="media/container-insights-syslog/DCR4.png" alt-text="Screenshot of Configuration panel for Syslog data collection rule." border="false":::
0 commit comments