We have an AKS cluster in westeurope with 1 linux node and 2 windows nodes. On the windows nodes there are multiple pods running. The .NET Core applications inside these pods are generating application logs (stdout) which we can read by running the "kubectl logs" command. These logs contain all the information we expect to see there. The container logs are also ingested into an Azure Log Analytics workspace by using an OMS agent which runs on the linux node.
However when we query the ContainerLog table we see a lot of the same logs compared to the output of "kubectl logs" but not everything. The missing log lines are of the same log level as the present log lines and originate in the same application. Also when we access the OMS agent by going into the container we see the logs we expect in the log file present in c:/var/log/containers.
We can't figure out why some lines from the same application are present in the ContainerLogs table and others are not.
Any help would be greatly appreciated,
Menno