How to remove Microsoft -perf (data source) from a Data rule collection

Question

I am trying to collect the Event records by the TaskScheduler that are recorded in the VM. I am using this query System[Provider[@Name='Microsoft-Windows-TaskScheduler/Operational']]]!, but I am having an issue with duplicate destination names within the Data Collection Rule. In this case, the duplicated name appears to be VMInsightsPerf-Logs-Dest, which requires the removal of Microsoft-Perf. However, I have not been able to find any documentation on how to remove it.

Answer 1

You need to modify the DCR configuration. Here’s a step-by-step guide to help you achieve this:

Log in to the Azure Portal: Go to the Azure Portal.

In the search bar, type "Data Collection Rules" and select it from the dropdown.

Find and select the specific Data Collection Rule (DCR) that you want to modify.

Once you have selected the DCR, click on the "Edit" button to modify the rule.

In the "Data Sources" section, locate the Microsoft-Perf data source.

Click on the "Delete" or "Remove" button next to the Microsoft-Perf data source to remove it from the rule.

Ensure that the Microsoft-Perf data source has been removed and that no other unintended changes have been made.

Click on the "Save" button to apply the changes to the Data Collection Rule.

If you have multiple DCRs to update, consider using automation scripts (PowerShell, Azure CLI) to streamline the process.

az monitor data-collection rule update \

  --resource-group <your-resource-group> \

  --name <your-data-collection-rule-name> \

  --data-sources <updated-data-sources-json>