Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,317 questions
Change path on Linux for Azure AMA and CEF Collectors
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 77%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Jody Spoor
0
Reputation points
I'm setting up Azure Monitoring Agents on Linux with CEF Collector.
I would like to change the cache directories to a separate drive.
Can anyone point me to where these paths are configured?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Pauline Mbabu 480 Reputation points Microsoft Employee2024-10-29T11:53:12.26+00:00 Hello @Jody Spoor ,
I have done research on this and I am not able to find the exact path to the change the cache directories.
I have seen some suggestions that For AMA, you may change the path by modifying thecacheDirectorysetting in theagent_settings.jsonfile. The file is usually located at/etc/opt/microsoft/azuremonitoragent/config/agent_settings.jsonor a similar path depending on your Linux distribution.For CEF Collector, you may change the path by modifying the
cache_pathsetting in thecollector.conffile. The file is usually located at/etc/opt/microsoft/omsagent/conf/omsagent.d/collector.confor a similar path depending on your Linux distribution.
I have not been able to test this on my end so this is something you can try.
The CEF and Syslog with AMA doc https://learn.microsoft.com/en-us/azure/sentinel/connect-cef-syslog-ama?tabs=portal highlights that to make changes to the syslog config file, locate it at Syslog-ng:/etc/syslog-ng/syslog-ng.conf.If you are able to get an answer to this kindly share it.
Sign in to comment
Sign in to answer