question

ParveenSingh avatar image
0 Votes"
ParveenSingh asked ParveenSingh commented

VM Disk space for Azure Log Analytics Agent

Hi
I was looking to see how much (rough) space does a log analytics agent needs on a local machine to store logs.
I have a few Linux VMs with a 30GB OS disk and the Log agent store over 16GB of logs under /var/log/azure. I can definitely go and upgrade the disk but are there any metrics that can identify how much space each extension roughly needs to store its log to plan for the disk upgrade?

Only extension installed right now are:
1. LinuxDiagnostic | Microsoft.OSTCExtensions.LinuxDiagnostic | 2.
2. OmsAgentForLinux | Microsoft.EnterpriseCloud.Monitoring.OmsAgentForLinux | 1.

3. SiteRecovery-Linux | Microsoft.Azure.RecoveryServices.SiteRecovery.Linux | 1.*

Thanks

azure-monitorazure-virtual-machines-extension
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Is your agent successfully synching to the monitor service? I thought the local cache is supposed to clear once it has successfully uploaded the logs.

0 Votes 0 ·

Well, the impression right now is, the disk gets full with the logs and the agent goes unresponsive. I was really trying to understand how much space does it need on local storage before the logs are uploaded and cleared from the local logs directory.

0 Votes 0 ·

1 Answer

FJcmdk4488-1603 avatar image
0 Votes"
FJcmdk4488-1603 answered FJcmdk4488-1603 edited

You might try to rotate the logs if you aren't seeing them clear on their own. Try this - https://github.com/microsoft/OMS-Agent-for-Linux/blob/master/installer/conf/logrotate.conf

This will change the logs to incremental and auto rotate them.

You might also look at this thread for other Azure logs that need rotation - https://github.com/Azure/azure-linux-extensions/issues/618

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.