Log Analytics Webspace against ContainerInstanceLogs has no entry Container IP

Waqar Ahmad 0

Can anyone suggest, issue i am facing is that i need to set an alert that if my container restarts, it should retain the assigned IP, otherwise it should send an alert. However to enable such alert, I am unable to find my ContainerInstanceLog containing the information about private IP of ACI.

My ContainerInstanceLog is renamed after logs of Instance has been redirected to the Log Analytics Analyzer

Can someone assist?

Waqar Ahmad 0 Reputation points

2024-11-20T17:35:20.91+00:00
Dear Sina

Thanks for the response. It seems Ok for the query to run from Cloud Shell, however I have verified all type of Logs including

ContainerInstanceLog

| where TimeGenerated > ago(1h) | project TimeGenerated, IPAddress

ContainerinstanceLog and several other, where the schema shows that non of them get the IP address funciton definition to return the value. So that KQL queries are not working at all.

I am more interested to have same KQL queries.

So let me know if you find any alternate to let it work.

Thanks & Regards

Waqar
Nikhil Duserla 3,565 Reputation points Microsoft Vendor

2024-11-22T18:49:23.1633333+00:00

Hi @Waqar Ahmad,

I am reviewing this query, and I will get back to you.
Nikhil Duserla 3,565 Reputation points Microsoft Vendor

2024-11-25T18:22:10.04+00:00

Hi @Waqar Ahmad,

Just checking in to see if the below answer provided by Sina Salam helped. If this answers your query, do click **Accept Answer** and **Upvote** for was this answer helpful. And, if you have any further query do let us know.
Nikhil Duserla 3,565 Reputation points Microsoft Vendor

2024-11-26T19:58:56.4066667+00:00

Hi @Waqar Ahmad,

Just checking in to see if the below answer provided by Sina Salam helped. If this answers your query, do click **Accept Answer** and **Upvote** for was this answer helpful. And, if you have any further query do let us know.

1 answer

Sina Salam 14,551 Reputation points

2024-11-20T17:25:46.83+00:00
Hello Waqar Ahmad,

Welcome to the Microsoft Q&A and thank you for posting your questions here.

I understand that you are having issues finding your private IP Address: Log Analytics Webspace against ContainerInstanceLogs has no entry Container IP.

To find the private IP address of your Azure Container Instance (ACI) and set up an alert for IP changes upon restart, you can use the Azure CLI and Azure portal. First, open Azure Cloud Shell from the Azure portal by clicking on the Cloud Shell icon at the top of the page. Then, run the following command to retrieve the private IP address of your container instance:

az container show --name <your-container-name> --resource-group <your-resource-group> --query ipAddress.ip --output tsv

Replace <your-container-name> and <your-resource-group> with the actual names of your container and resource group. This command will output the private IP address of your container instance.

The NEXT, to set up an alert for your ACI to notify you if the IP changes upon restart, follow these steps:

Create an Alert Rule for Container Restart:

Go to the Azure portal and navigate to your container instance.

Select Alerts from the container blade.

Click on Create Alert Rule.

Under the Scope section, ensure your container instance is selected.

Click Add Condition and select the Restart Container Group signal.

Click Done.

Add Action Groups:

Under Actions, click Add Action Groups.

Select the subscription and resource group.

Configure the notification settings (e.g., email, SMS) and click Next: Notifications.

Review and create the alert rule.

Use Azure Log Analytics to monitor the IP address. Ensure your container logs are being sent to Log Analytics and create a query in Log Analytics to check the IP address of your container instance:

ContainerInstanceLog | where TimeGenerated > ago(1h) | project TimeGenerated, IPAddress

Set up an alert based on this query to notify you if the IP address changes.

If you need a static IP for your container instance, consider deploying your ACI in a virtual network and using a static IP configuration. This can be done by setting up a user-defined route and using Azure Firewall or NAT gateway.

I hope this is helpful! Do not hesitate to let me know if you have any other questions.

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful.
Please sign in to rate this answer.
Sina Salam 14,551 Reputation points

2024-11-22T20:49:23.9533333+00:00

Hello Waqar Ahmad,

Thank you for your feedback. Kindly review the below options to resolve the issue:

Step 1: Use Azure Diagnostic Settings for Enhanced Logs and ensure that the diagnostic settings for your ACI are configured to send all relevant logs and metrics to Log Analytics.

Follow these steps:

Navigate to the Azure Container Instance in the Azure Portal.

Select Diagnostics settings from the left pane.

Enable diagnostic settings to send logs and metrics to your Log Analytics workspace.

Confirm whether additional log types (e.g., AzureDiagnostics) provide the IP address or related metadata.

Step 2: Use Azure Resource Graph for Metadata (Alternative to Logs) and if logs do not capture the IP, use Azure Resource Graph to query metadata about the ACI, including its private IP. Resource Graph queries can provide a snapshot of the container's configuration, including the current private IP.

Run the following query in Azure Resource Graph Explorer:

resources | where type == "microsoft.containerinstance/containerGroups" | where name == "<your-container-name>" | project name, properties.ipAddress.ip

Step 3: Set Up an Alert for Container Restarts and create an alert rule in Azure Monitor based on the Restart Container Group signal:

In the Azure Portal, go to the Monitor service.

Select Alerts > Create > Alert rule.

Scope: Select the specific container instance.

Condition: Choose Restart Container Group as the signal.

Action: Configure an action group to notify you via email, SMS, or other methods.

Create the alert rule.

Step 4: Automate IP Tracking Using a Script, since Log Analytics doesn’t log the IP directly, automate IP tracking with a custom Azure Function or Logic App:

Write a script to periodically check the container's private IP using the Azure CLI:

az container show --name <your-container-name> --resource-group <your-resource-group> --query ipAddress.ip --output tsv

Log this information to a custom table in Log Analytics.

Step 5: If consistent IP addresses are critical, deploy the ACI in a virtual network with a static private IP:

Create a virtual network and subnet.

Configure the ACI to use this VNet and assign a static private IP.

This eliminates the need to monitor IP changes after restarts.

Success.

Waqar Ahmad 0 Reputation points

2024-11-27T08:09:37.7633333+00:00

Dear All!

Since I mentioned in my last comments that container has not been updated for the logs to be created, associated with its restart and configurations captured at startup and the allocated IP to container (which is private IP), I have given it another way round to work.

I created a detailed powershell script and put it in run book, which is just checking the IP container has got at "container startup" status and match it with my private IP, which I want always to be reallocated on startup. This runbook is check and it gives me the IP if I ran it and give me the IP Mismatch display if it's not the same.

I put these scripts (powershell) into the alert as action group.

Alert I created is just to be send an email, upon restarting of the container and call action group with runbook. I checked that alert is working, however so far, the IP change has not happened to verify if runbook is responding on this alert. PowerShell scripts have been checked independently for correct matching IP.

If someone has an idea that this workaround for alert with runbook as port of action group, does not work. Please comment and suggest.

Will be thankful

Regards

Waqar

Nikhil Duserla 3,565 Reputation points Microsoft Vendor

2024-12-02T09:49:27.0666667+00:00

Hi Waqar Ahmad,

I am reviewing this query, and I will get back to you.

Nikhil Duserla 3,565 Reputation points Microsoft Vendor

2024-12-03T13:54:56.74+00:00

Hi Sina Salam,

Could you please share insights on the recent customer response above?

Thank you!

Nikhil Duserla 3,565 Reputation points Microsoft Vendor

2024-12-23T13:13:42.0433333+00:00

Hi Waqar Ahmad,

Thank you for your patience.

I would recommend you open an azure support case. Support team will be able to check and share the insights.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Log Analytics Webspace against ContainerInstanceLogs has no entry Container IP

1 answer

Your answer