Configuring a VPN Gateway's Diagnostic Logs to be Sent to a Log Analytics Workspace

The resource logs pertaining to a VPN gateway can be sent to a designated Log Analytics Workspace, so that administrators can easily consolidate, correlate, and perform complex analysis on the log entries. By default, the Log Analytics Workspace Name parameter is set to All. However, if you want the test to use only specific Log Analytics Workspaces for metrics collection, then provide the names of these workspaces as a comma-separated list. To determine the names of the workspaces, do the following:

1. Login to the Microsoft Azure Portal and select the Monitor service, a page will then appear. Click on the Diagnostic Settings option in the left panel of the page.

2. Diagnostic settings page will then appear listing all the resources of a chosen subscription. Here, select the Subscription being monitored. In the resource list of that subscription, locate the VPN gateway (this should typically be of the Resource Type, Virtual Network Gateway) for which you want to define/view diagnostic settings. Then, click on that gateway.

3. A page will then appear, this will list the diagnostic settings that pre-exist for the chosen VPN gateway. If any of the existing diagnostic settings have already been configured with Log Analytics Workspaces, then the Log Analytics workspace column will display these workspace names. You can configure the LOG ANALYTICS WORKSPACE NAME parameter of this test with any of these workspace names. If required, you can even configure this parameter with two/more workspaces listed in this page, as a comma-separated list.

4. However, If the Log Analytics workspace column in Diagnostic settings page is blank for all the existing diagnostic settings, it is a clear indication that the VPN gateway's diagnostic logs are yet to be configured to be sent to any Log Analytics Workspace. In this case therefore, you should create a new diagnostic setting for the target VPN gateway, where a Log Analytics Workspace is configured as the destination for the resource logs. To achieve this, follow the procedure detailed below:

   1. To create a new diagnostic setting for the chosen gateway, click on the Add diagnostic setting option provided in the Diagnostic settings page.

   2. A page will then appear, provide a Diagnostic setting name in the text box. Then, select all the check boxes under Categories, so that all diagnostic logs related to the chosen VPN gateway are enabled. Then, select the Send to Log Analytics workspace check box, and pick the Log Analytics workspace to which the chosen logs are to be sent.

   3. Finally, click the Save option to save the configuration.

   4. Repeat the above given steps for every VPN gateway that you want monitored.