Merge pull request #9369 from amsliu/v-liuamson-CI6616

New article for CI 6616.

Author: Amson Liu

support/azure/azure-monitor/activity-logs/config-export/troubleshoot-export-of-activity-logs-across-subscriptions.md

@@ -0,0 +1,45 @@
+---
+title: Troubleshoot Export of Activity Logs across Azure Subscriptions
+description: Troubleshooting guide for resolving issues that affect exporting activity logs across Azure subscriptions.
+ms.date: 07/23/2025
+ms.reviewer: v-liuamson; v-gsitser
+ms.service: azure-monitor
+ms.custom: I can’t configure export of Activity Logs
+---
+
+# Troubleshoot the export of activity logs across Azure subscriptions
+
+Users might experience permission-related issues that prevent successful log transfer when they try to export activity logs from one Microsoft Azure subscription to another. This guide provides troubleshooting steps to resolve these issues and successfully export logs between subscriptions.
+
+## Common issues and solutions
+
+- **Permission Configuration**: Make sure that the shared access policy for the event hub namespace includes **Manage**, **Send**, and **Listen** permissions. These permissions are crucial for streaming logs to Event Hubs.
+- **Diagnostic Settings**: Verify that the diagnostic settings are correctly configured to use the appropriate event hubs policy name. Navigate to the diagnostic settings, note the event hub policy name, and check the permissions in the event hub namespace.
+- **Role Assignment**: Verify that the Azure system-assigned managed identity has the necessary role assignments. Use the Azure CLI to list role assignments and verify that the **Azure Event Hubs Data Sender** role is assigned.
+
+### Instructions to resolve export issues
+
+1. Verify shared access policy permissions:
+   1. Open the diagnostic settings in Azure.
+   1. Note the event hub policy name that's used.
+   1. Navigate to the event hub namespace and open the **Shared Access Policy** tab.
+   1. Make sure that the **Manage**, **Send**, and **Listen** permissions are selected.
+
+2. Check the role assignments:
+   1. Go to **Access Control (IAM)** on the event hub namespace or resource group.
+   1. Look for any Microsoft Insights or Azure Monitor-related identities that have the **Azure Event Hubs Data Sender** role.
+   1. To list role assignments, run the following command in Azure CLI:
+
+    ```bash
+     az role assignment list --scope <EventHubNamespaceResourceID> --output table
+     ```
+
+3. Verify data ingestion:
+   1. Make sure that data is being ingested into the event hub as expected.
+   1. If the issue persists, consider scheduling a remote session for further investigation.
+
+## References
+
+- [Authorize access to Azure Event Hubs](/azure/event-hubs/authorize-access-event-hubs)
+- [Diagnostic settings in Azure](/azure/azure-monitor/essentials/diagnostic-settings)
+- [Azure CLI Documentation](/cli/azure)

support/azure/azure-monitor/toc.yml

@@ -11,24 +11,26 @@ items:
         href: activity-logs/config-export/understanding-and-transitioning-from-legacy-to-diagnostic-settings.md
       - name: Diagnostic Settings Transition from Legacy Solutions
         href: activity-logs/config-export/diagnostic-settings-transition-from-legacy-solutions.md
-      - name: Detailed Guide on Pushing Subscription Activity Logs to Sentinel
+      - name: Push subscription activity logs to Sentinel
         href: activity-logs/config-export/pushing-subscription-activity-logs-to-sentinel.md
-      - name: Exporting Directory Level Activity Logs to Event Hub
+      - name: Export directory-level activity logs to Event Hubs
         href: activity-logs/config-export/exporting-directory-level-activity-logs-to-event-hub.md
-      - name: Resolving Log Limit Issues in Azure Function Apps
+      - name: Resolve log limit issues in Azure Function Apps
         href: activity-logs/config-export/resolving-log-limit-issues-in-azure-function-apps.md
-      - name: Understanding and Managing Diagnostic Settings Retention
+      - name: Understanding and managing diagnostic settings retention
         href: activity-logs/config-export/understanding-and-managing-diagnostic-settings-retention.md  
-      - name: Centralized Configuration of Activity Logs to Event Hub
+      - name: Centralized Configuration of Activity Logs to Event Hubs
         href: activity-logs/config-export/centralized-configuration-of-activity-logs-to-event-hub.md
-      - name: Troubleshoot Azure CLI Configuration Issues
+      - name: Troubleshoot Azure CLI configuration issues
         href: activity-logs/config-export/troubleshoot-azure-cli-configuration-issues.md
-      - name: Troubleshoot Export of Audit Logs to Another Tenant
+      - name: Troubleshoot export of audit logs to another tenant
         href: activity-logs/config-export/troubleshoot-export-of-audit-logs-to-another-tenant.md
-      - name: Troubleshoot Activity Log Download Issues
+      - name: Troubleshooting activity log download issues
         href: activity-logs/config-export/troubleshoot-activity-log-download-issues.md
-      - name: Troubleshoot Permission Errors in Activity Log Configuration
+      - name: Troubleshoot permission errors in Activity Log configuration
         href: activity-logs/config-export/troubleshoot-permission-errors-in-activity-log-configuration.md
+      - name: Troubleshoot the export of activity logs across Azure subscriptions
+        href: activity-logs/config-export/troubleshoot-export-of-activity-logs-across-subscriptions.md
 - name: Application Insights
   items:
   - name: OpenTelemetry troubleshooting