Azure SFTP Storage Logging

Question

I am using SFTP to send data to Azure blob storage from multiple sites. All of my sites are working except for one. I can find nothing in the configuration of the non-working site that differs from the others. Is there a way to log connection attempts that might provide insight?

Answer 1

Hello Chris Conner,

Welcome to Microsoft Q&A Forum. Thanks for posting your query here!

I understand that you are utilizing SFTP to transfer data to Azure blob storage from various locations. All of your sites are functioning properly, with the exception of one.

We recommend you enable Diagnostic Logging on Your Storage Account, go to "Diagnostic settings and Enable Storage Analytics logging. Post which Selects the log types you're interested in (e.g., "Blob service logs") and choose a destination for the logs (e.g., Azure Monitor Logs).

Please be informed that Storage Analytics logs provide detailed information about all operations performed on your storage account, including successful and failed requests. You can analyze these logs to identify specific errors related to the failing SFTP connection (e.g., authentication errors, network issues, access denied). The logs can provide valuable clues to pinpoint the root cause of the connection problem. Ensure to Examine the logs of the SFTP server (if available) at the non-working site. These logs may contain error messages related to connection attempts, authentication failures, or data transfer issues.

When it comes to network Connectivity Perform network connectivity tests between the non-working site and the Azure storage account. Check for network latency, packet loss, and firewall rules that might be blocking the connection. Use network monitoring tools (e.g., ping, traceroute, network sniffers) to identify any network-related issues.

• Review the firewall rules configured on your storage account. Ensure that the IP address or IP range of the non-working site is allowed access to the storage account.
• If your storage account is within a virtual network, check the NSG rules associated with the subnet to ensure that traffic from the non-working site is allowed.
• Ensure that the SFTP credentials used by the non-working site are correct and have the necessary permissions to access the storage account.
• Verify that the credentials have not expired.

Post following the above provided steps Test with a Simple tool use a simple SFTP client and try connecting to the storage account from the non-working site using a simple SFTP client (e.g., FileZilla, WinSCP). This can help isolate the issue to the SFTP client, the network, or the storage account configuration. And carefully compare the network configurations, firewall rules, and SFTP client settings of the non-working site with those of the working sites. Look for any discrepancies that might be causing the issue.

Let us Know if you have any questions or concerns, we are here at your service to answer.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. which might be beneficial to other community members reading this thread.