Edit

Share via

Troubleshoot the export of Activity Logs across Azure subscriptions

Users might experience permission-related issues that prevent successful log transfer when they try to export activity logs from one Microsoft Azure subscription to another. This guide provides troubleshooting steps to resolve these issues and be able to successfully export logs between subscriptions.

Common issues and solutions

  • Permission Configuration: Make sure that the shared access policy for the event hub namespace includes Manage, Send, and Listen permissions. These permissions are critical to streaming logs to Event Hubs.
  • Diagnostic Settings: Verify that the diagnostic settings are correctly configured to use the appropriate event hub policy name. Navigate to the diagnostic settings, note the event hub policy name, and check the permissions in the event hub namespace.
  • Role Assignment: Verify that the Azure system-assigned managed identity has the necessary role assignments. Use the Azure CLI to list role assignments and verify that the Azure Event Hubs Data Sender role is assigned.

Instructions to resolve export issues

  1. Verify the shared access policy permissions:

    1. Open the diagnostic settings in Azure.
    2. Note the event hub policy name that's used.
    3. Navigate to the event hub namespace, and open the Shared Access Policy tab.
    4. Make sure that the Manage, Send, and Listen permissions are selected.

  2. Check the role assignments:

    1. Go to Access Control (IAM) on the event hub namespace or resource group.
    2. Look for any Microsoft Insights or Azure Monitor-related identities that have the Azure Event Hubs Data Sender role.
    3. To list role assignments, run the following command in Azure CLI:
     az role assignment list --scope <EventHubNamespaceResourceID> --output table

  3. Verify data ingestion:

    1. Make sure that data is being ingested into the event hub as expected.
    2. If the issue persists, consider scheduling a remote session for further investigation.

References

Contact us for help

If you have questions or need help, create a support request, or ask Azure community support. You can also submit product feedback to Azure feedback community.