Hands-On Linux Administration on Azure

Getting the data

In the Advanced settings section of this resource, you can add performance and syslog data sources. You can access all the data via the log search, using a special query language. If you are new to this language, you should visit https://docs.loganalytics.io/docs/Learn/Getting-Started/Getting-started-with-queries and https://docs.loganalytics.io/index.

For now, just execute the query:

search *

To see whether there is data available, limit the search to one virtual machine:

search * | where Computer == "centos01"

Or to get all the syslog messages, as a test, you can reboot your virtual machine, or play with this:

logger -t <facility>. <priority> "message"

Execute the following query in syslog to view the results:

Syslog | ...