Questions[oms](server)

I want to collect SNMP data from my on-prem equipment and send it to Azure log management. To be more precise, I have a Linux virtual machine running in Azure that is to collect SNMP data from my on-prem router and send that data to my Azure log analytics workspace. Is there any generally recommended and lightweight solution to this?

I was trying to achieve this using collectd, but the problem was connecting it with the OMS agent. The collectd is to collect the SNMP data and forward it to OMS agent which then sends the data to Azure.

Now, I have a newly installed Debian 11 virtual machine. I have installed OMS agent, and collectd 5.12.0. that I have downloaded from collectd.org. I cannot run the collectd service. The error I get is that there is a missing plugin called "write_http" which is necessary to connect it with the OMS agent (the .so file is missing, but the configuration regarding the plugin exists within the collectd.conf file). So far I couldn't find that plugin to download it. Am I missing something?

I was wondering if someone could give me a detailed explanation/solution how to set this up from the beginning?

Thanks in advance!

I wonder if anyone out there configured OMS Linux Agent to send catalina.out logs to Logs Analytics in Azure? I have config file but for some reason its not working , it could be that after tomcat upgrade from 8.5.32 -> 8.5.35 file format changed.

Here is my config which is failing to send info:

<source>
  @type sudo_tail
  format none
  tag oms.api.tomcat.rota.out
  path /var/lib/tomcat/logs/catalina.out
  pos_file /var/opt/microsoft/omsagent/state/tomcat.log.rota.out.pos
  read_from_head true
  run_interval 30
</source>

the error in omsagent.log I see is:

2019-05-20 13:05:31 +0000 [info]: INFO Received paths from sudo tail plugin : /var/lib/tomcat/logs/catalina.out
2019-05-20 13:05:31 +0000 [info]: INFO Following tail of /var/lib/tomcat/logs/catalina.out
2019-05-20 13:05:39 +0000 [warn]: Missing DataType or IPName field in record from tag 'oms.api.tomcat.rota.out'
2019-05-20 13:05:58 +0000 [info]: Sending OMS Heartbeat succeeded at 2019-05-20T13:05:58.645Z

Please show me how this config should look like to succesfully send logs to Log Analytics Workspace

Regards

I am trying to collect azure diagnostics data from some resources in Azure on one separate subscription and directory, and ship them to an OMS / log analytics workspace on another subscription / directory.

The account i'm using has access to both organizations, however when I am running the commands to "To enable sending of Diagnostic Logs to a Log Analytics workspace" (as described here)

Set-AzureRmDiagnosticSetting -ResourceId [your resource id] -WorkspaceId [resource id of the log analytics workspace] -Enabled $true

My Commands:

$resourceid = "/subscriptions/e12d538c-xxxx-xxxx-xxxx-e60xxxxx2144/resourceGroups/xxx-xxxx/providers/Microsoft.Cache/Redis/xxxxxxxxxx"
$workspaceid = "/subscriptions/6a9axxxx-8xxx-4xxx-92xx-1bxxxxxx5fc23/resourceGroups/xxxxx-oms-rg/providers/Microsoft.OperationalInsights/workspaces/xxxxxxx"
Set-AzureRmDiagnosticSetting -ResourceId $ResourceId  -WorkspaceId $workspaceId -Enabled $true

I am getting the following error:

Set-AzureRmDiagnosticSetting : The access token is from the wrong issuer 'https://sts.windows.net/5xxxxxxx-cxxx-4xxx-axxx-2xxxxxxxxxxxxx/'. It must match the tenant 'https://sts.windows.net/2xxxxxxx-cxxx-2xxx-bxxx-3xxxxxxxxxxxxx/' associated with this subscription. Please use the authority (URL) 'https://login.windows.net/2xxxxxxx-cxxx-2xxx-bxxx-3xxxxxxxxxxxxx' to get the token. Note, if the subscription is transferred to another tenant there is no impact to the services, but information about new tenant could take time to propagate (up to an hour). If you just transferred your subscription and see this error message, please try back later. At line:1 char:1 + Set-AzureRmDiagnosticSetting -ResourceId $ResourceId -WorkspaceId $w ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : CloseError: (:) [Set-AzureRmDiagnosticSetting], CloudException + FullyQualifiedErrorId : Microsoft.Azure.Commands.Insights.Diagnostics.SetAzureRmDiagnosticSettingCommand

I am using a trial license to monitor my home PC as part of a simple demo/test environment to allow me to play with the features.

When I try to add Automation and Control I am asked to Configure Workspace. This them prompts me to configure an Automation Account. I have no existing accounts available to use and get the following message when trying to create one

Cannot link Automation account with workspace.

I would like to enable the following solutions (Update Management and Change Tracking)but both require this configuration.

Any assistance with this would be most appreciated.

Thanks

Before we use Microsoft OMS do we first need to setup and configure an MS Azure account? I have tried to connect a server on step 2 but never can I get past that step.