Azure Stack HCI 資料收集Azure Stack HCI data collection

適用于: Azure Stack HCI、版本20H2Applies to: Azure Stack HCI, version 20H2

本主題說明收集的必要資料,以保持 Azure Stack HCI 安全、最新狀態,並如預期般運作,以在2020年12月正式推出 (GA) 。This topic describes required data collected to keep Azure Stack HCI secure, up to date, and working as expected for General Availability (GA) in December 2020.

為了讓 Microsoft 提供 Azure Stack HCI,需要以下所述的資料。The data described below is required for Microsoft to provide Azure Stack HCI. 這項資料每天會收集一次,而且可以在事件記錄檔中查看資料收集事件。This data is collected once a day, and data collection events can be viewed in the event logs. Azure Stack HCI 會收集讓您的叢集保持在最新狀態、安全且正常運作所需的最少資料。Azure Stack HCI collects the minimum data required to keep your clusters up to date, secure, and operating properly.

重要

下面所述的 Azure Stack HCI 收集的資料,與可針對不同層級的集合進行設定的 Windows 診斷資料無關。The data described below that Azure Stack HCI collects is independent from Windows diagnostic data, which can be configured for various levels of collection. 在 Azure Stack HCI 中,Windows 診斷資料集合的預設設定是 [安全性 (關閉) ],這表示除非系統管理員變更診斷資料設定,否則不會傳送任何 Windows 診斷資料。In Azure Stack HCI, the default setting for Windows diagnostic data collection is Security (off), meaning that no Windows diagnostic data is sent unless the administrator changes the diagnostic data settings. 如需詳細資訊,請參閱在組織中設定 Windows 診斷資料For more information, see Configure Windows diagnostic data in your organization. Microsoft 是與 Azure Stack HCI 連線所收集之任何 Windows 診斷資料的獨立控制器。Microsoft is an independent controller of any Windows diagnostic data collected in connection with Azure Stack HCI. Microsoft 會根據 Microsoft 隱私權聲明來處理 Windows 診斷資料。Microsoft will handle the Windows diagnostic data in accordance with the Microsoft Privacy Statement.

資料收集和常駐Data collection and residency

這 Azure Stack HCI 資料:This Azure Stack HCI data:

  • 在將產品註冊至 Azure 之前,不會傳送給 Microsoft。is not sent to Microsoft until the product is registered with Azure. 當 Azure Stack HCI 取消註冊時,此資料收集將會停止。When Azure Stack HCI is unregistered, this data collection stops.
  • 會記錄到 Microsoft AzureStack-HCI/分析事件通道。is logged to the Microsoft-AzureStack-HCI/Analytic event channel.
  • 是 JSON 格式,讓系統管理員可以檢查及分析所傳送的資料。is in JSON format, so that system administrators can examine and analyze the data being sent.
  • 會儲存在美國境內安全的 Microsoft 操作資料中心內。is stored within the United States in a secure Microsoft-operated datacenter.

資料保留Data retention

一旦 Azure Stack HCI 收集這項資料,就會保留90天。Once Azure Stack HCI collects this data, it is retained for 90 days. 匯總、取消識別的資料可能會保持較長的時間。Aggregated, de-identified data may be kept longer.

收集了哪些資料?What data is collected?

Azure Stack HCI 會收集:Azure Stack HCI collects:

  • 伺服器的相關資訊,例如作業系統版本、處理器型號、處理器核心數目、記憶體大小、叢集識別碼和硬體識別碼的雜湊Information about servers such as operating system version, processor model, number of processor cores, memory size, cluster identifier, and hash of hardware ID
  • 已安裝的 Azure Stack HCI 伺服器功能清單 (例如 BitLocker) List of installed Azure Stack HCI server features (e.g. BitLocker)
  • 計算 Azure Stack HCI 作業系統可靠性所需的資訊Information necessary to compute the reliability of the Azure Stack HCI operating system
  • 計算健康情況集合資料可靠性所需的資訊Information necessary to compute the reliability of the health collection data
  • 從事件記錄檔收集特定錯誤的資訊,例如更新下載失敗Information gathered from the event log for specific errors, such as update download failed
  • 計算儲存體可靠性的資訊Information for computing storage reliability
  • 計算實體磁片可靠性的資訊Information for computing physical disk reliability
  • 計算磁片區加密可靠性的資訊Information for computing the reliability of volume encryption
  • 計算儲存空間修復的可靠性和效能的相關資訊Information for computing the reliability and performance of Storage Spaces repair
  • 驗證 Azure Stack HCI 作業系統安全性的資訊Information to validate security of the Azure Stack HCI operating system
  • 計算 Azure Stack HCI 作業系統的防毒軟體/反惡意程式碼狀態的可靠性資訊Information to compute reliability of the antivirus/antimalware state of the Azure Stack HCI operating system
  • 相互關聯網路元件可靠性的資訊Information to correlate reliability of the networking components
  • 相互關聯網路效能的相關資訊Information to correlate networking performance
  • 將更新和安裝的可靠性相互關聯的相關資訊Information to correlate reliability of updates and installations
  • 測量 Hyper-v 可靠性的資訊Information to measure reliability of Hyper-V
  • 用以測量/相互關聯叢集元件可靠性的資訊Information to measure/correlate reliability of the clustering components
  • 此資訊可追蹤叢集感知更新 (CAU) 功能是否成功Information to track the success of the Cluster Aware Updating (CAU) feature
  • 用以測量/使嚴重損壞修復功能可靠性的資訊Information to measure/correlate the reliability of the Disaster Recovery feature
  • 描述套用至 Azure Stack HCI 伺服器之 SMB 頻寬限制的資訊Information to describe the SMB Bandwidth limits applied to Azure Stack HCI servers

查看此資料View this data

  1. 使用下列 PowerShell 命令來啟用分析記錄:Enable the analytic log using the following PowerShell command:

    wevtutil sl Microsoft-AzureStack-HCI/Analytic /e:True
    
  2. 查看記錄以查看收集的資料:View the log to see the collected data:

    Get-WinEvent -LogName Microsoft-AzureStack-HCI/Analytic -Oldest
    
  3. 格式化要匯出的資料:Format the data for exporting:

    Get-WinEvent -LogName Microsoft-AzureStack-HCI/Analytic -Oldest `
    | Where-Object Id -eq 802 `
    | ForEach-Object { 
        [pscustomobject] @{
            TimeCreated = $_.TimeCreated 
            EventName=$_.Properties[0].Value 
            Value=$_.Properties[1].Value 
        } 
    }
    

輸出應該看起來像這樣:The output should look something like this:

TimeCreated            EventName                                                  Value
-----------            ---------                                                  -----
11/16/2020 10:36:28 AM Microsoft.AzureStack.HCI.Diagnostic.Core                   {"OEMName":"Microsoft Corporation"...
11/16/2020 10:36:28 AM Microsoft.AzureStack.HCI.Diagnostic.ProductFeatures        {"InstalledFeatures":["Server-Core...
11/16/2020 10:36:28 AM Microsoft.AzureStack.HCI.Diagnostic.OSReliability          {"DailyDirtyRestarts":0,"WeeklyDir...
11/16/2020 10:36:28 AM Microsoft.AzureStack.HCI.Diagnostic.DiagnosticHealth       {"DailySuccessfulDiagnosticUploads...
11/16/2020 10:36:28 AM Microsoft.AzureStack.HCI.Diagnostic.ErrorSummary           {"ErrorSummary":[{"EventName":"Win...
11/16/2020 10:36:29 AM Microsoft.AzureStack.HCI.Diagnostic.VolumeSummary          {"VolumeCount":2,"HealthyVolumeCou...
11/16/2020 10:36:29 AM Microsoft.AzureStack.HCI.Diagnostic.DiskSummary            {"DiskCount":33,"Summary":[]}
11/16/2020 10:36:29 AM Microsoft.AzureStack.HCI.Diagnostic.BitlockerVolumeSummary {"BitlockerVolumeCount":0,"Summary...
11/16/2020 10:36:29 AM Microsoft.AzureStack.HCI.Diagnostic.StorageErrors          {"ErrorSummary":[{"EventName":"Sto...
11/16/2020 10:36:29 AM Microsoft.AzureStack.HCI.Diagnostic.StorageRepairSummary   {"DailyRepairStartCount":0,"Weekly...
11/16/2020 10:36:29 AM Microsoft.AzureStack.HCI.Diagnostic.TrustedPlatformModule  {"Manufacturer":"MSFT","Manufactur...
11/16/2020 10:36:29 AM Microsoft.AzureStack.HCI.Diagnostic.MicrosoftDefender      {"AMEngineVersion":"1.1.17600.5","...
11/16/2020 10:36:30 AM Microsoft.AzureStack.HCI.Diagnostic.NetworkInfo            {"NetworkDirect":true,"NetworkDire...
11/16/2020 10:36:30 AM Microsoft.AzureStack.HCI.Diagnostic.NetworkAdapterSummary  {"NetworkAdapterGroup":[{"DriverNa...
11/16/2020 10:36:30 AM Microsoft.AzureStack.HCI.Diagnostic.OSDeploy               {"OSInstallType":0}
11/16/2020 10:36:30 AM Microsoft.AzureStack.HCI.Diagnostic.ClusterProperties      {"Id":"fd2fc061-b924-4d61-a45b-3b3...
11/16/2020 10:36:30 AM Microsoft.AzureStack.HCI.Diagnostic.DisasterRecovery       {"IsDisasterRecoveryEnabled":false...