If the Log Analytics agent is offline, it collects logs and send them as it is online?
Will they be lost and will only those that the agent was online at that time be sent?
If the Log Analytics agent is offline, it collects logs and send them as it is online?
Will they be lost and will only those that the agent was online at that time be sent?
To follow-up, Please let us know if you have further query on this.
Please don’t forget to Accept the answer
Azure Monitor collects each event that matches a selected severity from a monitored event log as the event is created. The agent records its place in each event log that it collects from. If the agent goes offline for a period of time, then it collects events from where it last left off, even if those events were created while the agent was offline. There is a potential for these events to not be collected if the event log wraps with uncollected events being overwritten while the agent is offline.
Refer- https://docs.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events#data-collection
If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.
5 people are following this question.