How to display azure app service's web server log on Azure log Analytics?

Question

I have an api application hosted on azure App services. For the web server log (iis logs) I've turned on web server logging from Azure portal. Look at the screenshot below.

For storing web server logging

Server Logs are allowed to be stored on the Azure blob containers only. As per the configuration the logs are stored on blob container as expected. Now I want to use these logs to be displayed on Azure Log Analytics.

I've the following storage configurations on Log Analytics in Azure Web portal.

On Log Analytics explorer I can view logs from all other sources except the web server (iis logs). What I'm missing here?

is it something to do with the log level that you configure in the data sources menu. just guessing .. — Aravind, Jun 29 '16 at 11:52
If it is still actual: if portal configuration is all right, most likely something wrong with trace listener and level configuration or logging itself. — mikalai, Jan 09 '17 at 13:34
i want to view server logs (API logs), did you find any solution ? — Muhammad Shaharyar, Jun 06 '17 at 09:20

score 6 · Accepted Answer · edited Jun 20 '20 at 09:12

6

Verified with App Services team that Log Analytics is only supported at the IaaS (VM) level, not at PaaS (App Service) level.

Hopefully we can get this on their roadmap soon - for now you have to manually ingest this data into an external log management tool (Splunk, Sumo Logic, Azure Data Explorer).

Update 12/02/2019

Azure App Service has announced a Public Preview for IIS App Log integration with Azure Log Analytics.

edited Jun 20 '20 at 09:12

Community

1
1

answered Sep 29 '18 at 14:05

SliverNinja - MSFT

31,051
11
110
173

Very useful. Thank you, and great to hear it from a MSFTer. Becuase I could not find it I assumed I had missed something, as it seems such an obvious omission. Also good to to seen your list of other tools. – SamJolly Sep 29 '18 at 21:53
2

I don't really understand why this should not be supported? I mean its logfiles? Does it matter where they come from? So frustrating to not be able to easily create alerts and stuff based on the raw http logs. – Olaj Dec 24 '18 at 06:55
1

Based on an announcement on the 4th Nov, this is now available in preview, https://azure.microsoft.com/en-us/updates/new-app-service-integration-with-azure-monitor-preview/. – Kieron Nov 26 '19 at 20:38
@Kieron - [confirming the feature is now in preview](https://github.com/MicrosoftDocs/azure-docs/issues/11824#issuecomment-561042194) => great catch! – SliverNinja - MSFT Dec 03 '19 at 07:47

score 0 · Answer 2 · answered Oct 11 '21 at 09:07

Expanding on the prior answer, under the Diagnostic settings (preview) pane you can now integrate multiple logs to Azure via Add diagnostics setting, this can store:

AppServiceAntivirusScanAuditLogs
AppServiceHTTPLogs
AppServiceConsoleLogs
AppServiceAppLogs
AppServiceFileAuditLogs
AppServiceAuditLogs
AppServiceIPSecAuditLogs
AppServicePlatformLogs
AllMetrics

You can send them to:

Log Analytics workspace
Archive to storage account
Stream to event hub
Send to partner solution

Additionally, Application Insights is migrating to be backed by Log Analytics so we are getting close to fully integrated platform for metrics and logs

How to display azure app service's web server log on Azure log Analytics?

2 Answers2

Update 12/02/2019

Linked