An administrator configures diagnostic settings on a Recovery Services vault named Vault1 to enable Azure Backup Reports. The administrator targets a central Log Analytics workspace named Workspace1. To comply with corporate security and performance policies, the diagnostic setting is configured to use the Resource-specific schema. The administrator only selects the CoreAzureBackup log category. A week later, the administrator runs a Kusto Query Language (KQL) query targeting the AddonAzureBackupJobs table to analyze backup job execution times and status history, but the query returns no results. What should the administrator do to resolve this issue?
- Modify the diagnostic settings of Vault1 to select the AddonAzureBackupJobs log category.Answer
- BModify the diagnostic settings of Vault1 to use the AzureDiagnostics table schema.
- CModify the KQL query to retrieve job details from the CoreAzureBackup table.
- DConfigure diagnostic settings on the individual virtual machines to send Guest OS diagnostic logs to Workspace1.
Answer
Modify the diagnostic settings of the Recovery Services vault to select the AddonAzureBackupJobs log category.
The correct action is to modify the diagnostic settings to select the AddonAzureBackupJobs log category. In Resource-specific schema mode, Azure Backup routes diagnostics logs to specific dedicated tables. The AddonAzureBackupJobs table is only populated when the corresponding AddonAzureBackupJobs log category is selected in the diagnostic settings of the Recovery Services vault.
Step-by-Step Solution
Key Concept
Azure Backup diagnostic settings and Log Analytics table mapping in Resource-specific mode