Document Details
How To Configure Shir For Log Analytics Collection
❌
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Bias Types:
⚠️
windows_first
⚠️
missing_linux_example
⚠️
windows_tools
Summary:
The documentation page demonstrates a Windows bias by exclusively referencing Windows tools and workflows (such as Event Viewer logs and Windows Performance Counters), providing links and instructions only for Windows-based Log Analytics agent installation, and omitting any mention of Linux equivalents or guidance for Linux-based SHIR hosts. There are no examples, instructions, or references for configuring log analytics collection on Linux systems.
Recommendations:
- Add a section describing how to instrument Linux-based SHIR hosts for log analytics collection, including installation of the Log Analytics agent on Linux and relevant prerequisites.
- Provide equivalent examples for configuring log collection and performance counters on Linux (e.g., syslog, Linux performance counters, or custom logs).
- Include links to Azure documentation for installing and configuring the Log Analytics agent on Linux virtual machines.
- Clearly indicate in each section whether the instructions apply to Windows, Linux, or both, and provide parity in guidance and screenshots.
- Mention any limitations or differences in monitoring capabilities between Windows and Linux SHIR hosts.
Create pull request
Scan History
| Date | Scan ID | Status | Bias Status |
|---|---|---|---|
| 2025-08-17 00:01 | #83 | in_progress | ✅ Clean |
| 2025-07-13 21:37 | #48 | completed | ❌ Biased |
| 2025-07-09 13:09 | #3 | cancelled | ✅ Clean |
| 2025-07-08 04:23 | #2 | cancelled | ❌ Biased |
Flagged Code Snippets
Perf
| where TimeGenerated >= ago(24h)
and ObjectName == "Network Adapter"
and InstanceName == "Mellanox ConnectX-4 Lx Virtual Ethernet Adapter"
and CounterName == "Bytes Received/sec"
Perf
| where TimeGenerated >= ago(24h)
and ObjectName == "Network Adapter"
and InstanceName == "Mellanox ConnectX-4 Lx Virtual Ethernet Adapter"
| project TimeGenerated, Computer, ObjectName, InstanceName, CounterName, CounterValue
| summarize percentile(CounterValue, 95) by bin(TimeGenerated, 30m), Computer, ObjectName, InstanceName, CounterName
let pObjectName = "Memory"; // Required to select the right counter
let pCounterName = "Available MBytes"; // Required to select the right counter
Perf
| where Type == "Perf" and ObjectName == pObjectName and CounterName == pCounterName
| project TimeGenerated, Computer, CounterName, CounterValue
| order by TimeGenerated asc
| summarize Value=max(CounterValue) by CounterName, TimeStamps=TimeGenerated