azure - 为 VMSS 添加 Azure 诊断设置

Question

我目前正在运行 Linux VMSS，其中包含使用 terraform 创建的 Ubuntu 20.04 VM。我希望添加 Linux Azure 诊断 (LAD) 扩展以启用虚拟机的诊断日志。这是我当前用于此目的的地形资源

resource "time_offset" "linux_oms_sas_start" {
  offset_days = -1
}

resource "time_offset" "linux_oms_sas_expiry" {
  offset_years = 5
}

data "azurerm_storage_account_sas" "linux_oms" {
  connection_string = var.storage_account_primary_connection_string
  https_only        = true

  resource_types {
    service   = true
    container = true
    object    = true
  }

  services {
    blob  = true
    table = true
    queue = false
    file = false
  }

  start  = time_offset.linux_oms_sas_start.rfc3339
  expiry = time_offset.linux_oms_sas_expiry.rfc3339

  permissions {
    read    = true
    write   = true
    delete  = true
    list    = true
    add     = true
    create  = true
    update  = true
    process = true
  }
  depends_on = [time_offset.linux_oms_sas_start,time_offset.linux_oms_sas_expiry]
}

resource "azurerm_virtual_machine_scale_set_extension" "da_extension" {
  name                       = "DAExtension"
  virtual_machine_scale_set_id         = var.vmss_id
  publisher                  = "Microsoft.Azure.Monitoring.DependencyAgent"
  type                       = "DependencyAgentLinux"
  type_handler_version       = "9.5"
  auto_upgrade_minor_version = false
}

resource "azurerm_virtual_machine_scale_set_extension" "diagnostics_extension" {
  name = "StorageExtension"
  virtual_machine_scale_set_id =  var.vmss_id
  publisher            = "Microsoft.Azure.Diagnostics"
  type                 = "LinuxDiagnostic"
  type_handler_version = "4.0"
  auto_upgrade_minor_version = false

  settings = <<SETTINGS
    {
      "StorageAccount": "${var.storage_account_name}",
      "ladCfg": {
          "diagnosticMonitorConfiguration": {
                "eventVolume": "Medium",
                "metrics": {
                     "metricAggregation": [
                        {
                            "scheduledTransferPeriod": "PT1H"
                        },
                        {
                            "scheduledTransferPeriod": "PT1M"
                        }
                    ],
                    "resourceId": "${var.vmss_id}"
                },
        "performanceCounters": ${file("${path.module}/azure_extension_diagnostics_linux_performancecounters.json")},
        "syslogEvents": ${file("${path.module}/azure_extension_diagnostics_linux_syslogevents.json")}
          },
          "sampleRateInSeconds": 15
      }
    }
  SETTINGS

  protected_settings = <<SETTINGS
    {
        "storageAccountName": "${var.storage_account_name}",
        "storageAccountSasToken": "${data.azurerm_storage_account_sas.linux_oms.sas}",
        "storageAccountEndPoint": "https://core.windows.net",
         "sinksConfig":  {
              "sink": [
                {
                    "name": "SyslogJsonBlob",
                    "type": "JsonBlob"
                },
                {
                    "name": "LinuxCpuJsonBlob",
                    "type": "JsonBlob"
                }
              ]
        }
    }
    SETTINGS
}

但是，当应用上述 terraform 代码时，我从门户收到如下错误

Enable failed:'NoneType' object has no attribute 'get_fluentd_syslog_src_config' 

任何有关问题所在的帮助将不胜感激。

附注我已附上代码中使用的 azure_extension_diagnostics_linux_performancecounters.json 文件和 azure_extension_diagnostics_linux_syslogevents.json 文件，以供需要时进一步引用。

azure_extension_diagnostics_linux_performancecounters.json 文件

{
  "performanceCounterConfiguration": []
}

和azure_extension_diagnostics_linux_syslogevents.json文件

{
  "syslogEventConfiguration": {
    "LOG_AUTH": "LOG_DEBUG",
    "LOG_AUTHPRIV": "LOG_DEBUG",
    "LOG_CRON": "LOG_DEBUG",
    "LOG_DAEMON": "LOG_DEBUG",
    "LOG_FTP": "LOG_DEBUG",
    "LOG_KERN": "LOG_DEBUG",
    "LOG_LOCAL0": "LOG_DEBUG",
    "LOG_LOCAL1": "LOG_DEBUG",
    "LOG_LOCAL2": "LOG_DEBUG",
    "LOG_LOCAL3": "LOG_DEBUG",
    "LOG_LOCAL4": "LOG_DEBUG",
    "LOG_LOCAL5": "LOG_DEBUG",
    "LOG_LOCAL6": "LOG_DEBUG",
    "LOG_LOCAL7": "LOG_DEBUG",
    "LOG_LPR": "LOG_DEBUG",
    "LOG_MAIL": "LOG_DEBUG",
    "LOG_NEWS": "LOG_DEBUG",
    "LOG_SYSLOG": "LOG_DEBUG",
    "LOG_USER": "LOG_DEBUG",
    "LOG_UUCP": "LOG_DEBUG"
  }
}

Answer 1

不支持安装Diagnostics Agent For Ubuntu 20.04。只能使用 Azure Monitor 代理或 Log Analytics 代理和依赖项代理。

引用:

Overview of the Azure monitoring agents - Azure Monitor | Microsoft Docs

Azure Compute - Linux diagnostic extension 4.0 - Azure Virtual Machines | Microsoft Docs