Document Details
How To Configure Shir For Log Analytics Collection
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
missing_linux_example
windows_tools
Summary
The documentation demonstrates a Windows bias by exclusively referencing Windows tools and workflows (e.g., Event Viewer, Windows Performance Counters, Log Analytics agent for Windows), and by omitting any mention of Linux equivalents or instructions for configuring log analytics collection on Linux-based SHIR hosts. All examples and screenshots are Windows-specific, and there is no guidance for Linux users.
Recommendations
- Add a dedicated section for configuring log analytics collection on Linux-based SHIR hosts, including references to the Log Analytics agent for Linux and relevant documentation.
- Provide Linux-specific examples for selecting and forwarding logs (e.g., syslog, journald) and performance counters (e.g., using collectd or telegraf).
- Include screenshots or command-line instructions relevant to Linux environments.
- Mention both Windows and Linux options in all relevant sections, or clarify if SHIR is only supported on Windows (if that is the case).
- Ensure parity in troubleshooting and verification steps for both operating systems.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
 Clean
|
| 2026-01-13 00:00 | #246 | completed |
Clean
|
| 2026-01-11 00:00 | #240 | completed |
Clean
|
| 2026-01-10 00:00 | #237 | completed |
Clean
|
| 2026-01-09 00:34 | #234 | completed |
Clean
|
| 2026-01-08 00:53 | #231 | completed |
Clean
|
| 2026-01-06 18:15 | #225 | cancelled |
Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Biased
|
| 2025-07-09 13:09 | #3 | cancelled |
Clean
|
| 2025-07-08 04:23 | #2 | cancelled |
Biased
|
Flagged Code Snippets
Perf
| where TimeGenerated >= ago(24h)
and ObjectName == "Network Adapter"
and InstanceName == "Mellanox ConnectX-4 Lx Virtual Ethernet Adapter"
and CounterName == "Bytes Received/sec"