|
1 | 1 | --- |
2 | 2 | title: Troubleshoot Export of Activity Logs across Azure Subscriptions |
3 | | -description: Troubleshooting guide for issues with exporting activity logs across Azure subscriptions. |
| 3 | +description: Troubleshooting guide for resolving issues that affect exporting activity logs across Azure subscriptions. |
4 | 4 | ms.date: 07/17/2025 |
5 | 5 | ms.reviewer: v-liuamson; v-gsitser |
6 | 6 | ms.service: azure-monitor |
7 | 7 | ms.custom: I can’t configure export of Activity Logs |
8 | 8 | --- |
9 | 9 |
|
10 | | -# Troubleshoot Export of Activity Logs across Azure Subscriptions |
| 10 | +# Troubleshoot the export of activity logs across Azure subscriptions |
11 | 11 |
|
12 | | -When attempting to export activity logs from one Azure subscription to another, users may encounter permission-related issues that prevent successful log transfer. This guide provides steps to troubleshoot and resolve these issues, ensuring seamless log export between subscriptions. |
| 12 | +Users might experience permission-related issues that prevent successful log transfer when they try to export activity logs from one Microsoft Azure subscription to another. This guide provides troubleshooting steps to resolve these issues and successfully export logs between subscriptions. |
13 | 13 |
|
14 | | -## Common Issues and Solutions |
| 14 | +## Common issues and solutions |
15 | 15 |
|
16 | | -- **Permission Configuration**: Ensure that the shared access policy for the Event Hub namespace includes **Manage**, **Send**, and **Listen** permissions. These permissions are crucial for streaming logs to Event Hubs. |
17 | | -- **Diagnostic Settings**: Verify that the diagnostic settings are correctly configured to use the appropriate Event Hub policy name. Navigate to the diagnostic settings, note the Event Hub policy name, and check the permissions in the Event Hub namespace. |
18 | | -- **Role Assignment**: Confirm that the Azure system-assigned managed identity has the necessary role assignments. Use the Azure CLI to list role assignments and verify that the **Azure Event Hubs Data Sender** role is assigned. |
| 16 | +- **Permission Configuration**: Make sure that the shared access policy for the event hub namespace includes **Manage**, **Send**, and **Listen** permissions. These permissions are crucial for streaming logs to Event Hubs. |
| 17 | +- **Diagnostic Settings**: Verify that the diagnostic settings are correctly configured to use the appropriate event hubs policy name. Navigate to the diagnostic settings, note the event hub policy name, and check the permissions in the event hub namespace. |
| 18 | +- **Role Assignment**: Verify that the Azure system-assigned managed identity has the necessary role assignments. Use the Azure CLI to list role assignments and verify that the **Azure Event Hubs Data Sender** role is assigned. |
19 | 19 |
|
20 | | -### Step-by-Step Instructions to Resolve Export Issues |
| 20 | +### Instructions to resolve export issues |
21 | 21 |
|
22 | | -1. **Verify Shared Access Policy Permissions**: |
23 | | - - Open the diagnostic settings in Azure. |
24 | | - - Note the Event Hub policy name used. |
25 | | - - Navigate to the Event Hub namespace and open the **Shared Access Policy** tab. |
26 | | - - Ensure that **Manage**, **Send**, and **Listen** permissions are checked. |
| 22 | +1. Verify shared access policy permissions: |
| 23 | + 1. Open the diagnostic settings in Azure. |
| 24 | + 1. Note the event hub policy name that's used. |
| 25 | + 1. Navigate to the event hub namespace and open the **Shared Access Policy** tab. |
| 26 | + 1. Make sure that the **Manage**, **Send**, and **Listen** permissions are selected. |
27 | 27 |
|
28 | | -2. **Check Role Assignments**: |
29 | | - - Go to **Access Control (IAM)** on the Event Hub namespace or resource group. |
30 | | - - Look for any Microsoft Insights or Azure Monitor-related identities with the **Azure Event Hubs Data Sender** role. |
31 | | - - Run the following command in Azure CLI to list role assignments: |
| 28 | +2. Check the role assignments: |
| 29 | + 1. Go to **Access Control (IAM)** on the event hub namespace or resource group. |
| 30 | + 1. Look for any Microsoft Insights or Azure Monitor-related identities that have the **Azure Event Hubs Data Sender** role. |
| 31 | + 1. Run the following command in Azure CLI to list role assignments: |
32 | 32 |
|
33 | 33 | ```bash |
34 | 34 | az role assignment list --scope <EventHubNamespaceResourceID> --output table |
35 | 35 | ``` |
36 | 36 |
|
37 | | -3. **Verify Data Ingestion**: |
38 | | - - Ensure that data is being ingested into the Event Hub as expected. |
39 | | - - If issues persist, consider scheduling a remote session for further investigation. |
| 37 | +3. Verify data ingestion: |
| 38 | + 1. Make sure that data is being ingested into the event hub as expected. |
| 39 | + 1. If issues persists, consider scheduling a remote session for further investigation. |
40 | 40 |
|
41 | | -## Reference |
| 41 | +## References |
42 | 42 |
|
43 | | -- [Authorize access to Azure Event Hubs](https://learn.microsoft.com/azure/event-hubs/authorize-access) |
| 43 | +- [Authorize access to Azure Event Hubs](https://learn.microsoft.com/azure/event-hubs/authorize-access-event-hubs) |
44 | 44 | - [Diagnostic settings in Azure](https://learn.microsoft.com/azure/azure-monitor/essentials/diagnostic-settings) |
45 | 45 | - [Azure CLI Documentation](https://learn.microsoft.com/cli/azure) |
0 commit comments