You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/agents/data-collection-rule-azure-monitor-agent.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -29,15 +29,15 @@ To send data to Log Analytics, create the data collection rule in the **same reg
29
29
1. From the **Monitor** menu, select **Data Collection Rules**.
30
30
1. Select **Create** to create a new Data Collection Rule and associations.
31
31
32
-
[](media/data-collection-rule-azure-monitor-agent/data-collection-rules-updated.png#lightbox)
32
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rules-updated.png#lightbox)
33
33
34
34
1. Provide a **Rule name** and specify a **Subscription**, **Resource Group**, **Region**, and **Platform Type**.
35
35
36
36
**Region** specifies where the DCR will be created. The virtual machines and their associations can be in any subscription or resource group in the tenant.
37
37
38
38
**Platform Type** specifies the type of resources this rule can apply to. Custom allows for both Windows and Linux types.
39
39
40
-
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-basics-updated.png#lightbox)
40
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-basics-updated.png#lightbox)
41
41
42
42
1. On the **Resources** tab, add the resources (virtual machines, virtual machine scale sets, Arc for servers) to which to associate the data collection rule. The portal will install Azure Monitor Agent on resources that don't already have it installed, and will also enable Azure Managed Identity.
43
43
@@ -52,17 +52,17 @@ To send data to Log Analytics, create the data collection rule in the **same reg
52
52
1. Select a **Data source type**.
53
53
1. Select which data you want to collect. For performance counters, you can select from a predefined set of objects and their sampling rate. For events, you can select from a set of logs and severity levels.
54
54
55
-
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-basic-updated.png#lightbox)
55
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-basic-updated.png#lightbox)
56
56
57
57
1. Select **Custom** to collect logs and performance counters that are not [currently supported data sources](azure-monitor-agent-overview.md#data-sources-and-destinations) or to [filter events using XPath queries](#filter-events-using-xpath-queries). You can then specify an [XPath](https://www.w3schools.com/xml/xpath_syntax.asp) to collect any specific values. See [Sample DCR](data-collection-rule-sample-agent.md) for an example.
58
58
59
-
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-custom-updated.png#lightbox)
59
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-data-source-custom-updated.png#lightbox)
60
60
61
61
1. On the **Destination** tab, add one or more destinations for the data source. You can select multiple destinations of the same or different types - for instance multiple Log Analytics workspaces (known as "multi-homing").
62
62
63
63
You can send Windows event and Syslog data sources can to Azure Monitor Logs only. You can send performance counters to both Azure Monitor Metrics and Azure Monitor Logs.
64
64
65
-
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-destination.png#lightbox)
65
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-destination.png#lightbox)
66
66
67
67
1. Select **Add Data Source** and then **Review + create** to review the details of the data collection rule and association with the set of virtual machines.
68
68
1. Select **Create** to create the data collection rule.
@@ -117,7 +117,7 @@ In Windows, you can use Event Viewer to extract XPath queries as shown below.
117
117
118
118
When you paste the XPath query into the field on the **Add data source** screen, (step 5 in the picture below), you must append the log type category followed by '!'.
119
119
120
-
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-extract-xpath.png#lightbox)
120
+
[](media/data-collection-rule-azure-monitor-agent/data-collection-rule-extract-xpath.png#lightbox)
121
121
122
122
See [XPath 1.0 limitations](/windows/win32/wes/consuming-events#xpath-10-limitations) for a list of limitations in the XPath supported by Windows event log.
0 commit comments