来源Collect Logs On-Demand with Azure Local Disconnected Operations1. 适用场景官方原文On-demand log collection involves manually gathering and sending diagnostic logs to Microsoft. These logs are stored in an Azure Data Explorer database that Microsoft Support can access to help investigate and resolve your reported issues. The collected diagnostic data is retained forup to 30 days.当 appliance 能工作、但有服务异常用 on-demand 直接传日志给 Microsoft当 appliance 完全 down用 fallback 方法mount VHD 取日志⚠️官方原文 ImportantBefore you use on-demand direct log collection, complete the prerequisites and set up observability with theSet-ApplianceObservabilityConfigurationcmdlet.If you skip these steps, you might see an error.2. 前置条件项说明已部署断开操作deploy-appliance.md已配置 observability见 §3磁盘空间普通日志 ≥25 GB空闲appliance 大包可压缩后25 GB预留压缩后体积 2 倍10GB 压缩 → 至少 20GB 空闲25GB → 至少 50GB建议分批上传避免一次性占满磁盘。3. 设置 Observability首次部署时建议做官方原文We recommend that you set up observability to get telemetry and logs for your first deployment. This allows Azure Local Disconnected to connect to Azure through Arc registration and use a managed identity to upload logs, metrics, and telemetry from the appliance VM.⚠️完全 Air-gapped 模式不需要此步——observability 本身需要出站。3.1 准备的参数参数说明Azure resource group资源组名例azure-disconnectedoperationsSPN有Azure Connected Machine Resource Administrator权限SPN credentialsappId passwordSubscriptionAzure 订阅 IDTenant IDAzure region资源提供方注册以下 RPMicrosoft.Compute、Microsoft.AzureArcData可选、Microsoft.HybridConnectivity、Microsoft.GuestConfiguration、Microsoft.HybridCompute3.2 配置步骤# 1. 登录 az login # 2. 建 RG az group create -g ResourceGroupName -l AzureRegion # 3. 列云 az cloud list -o table # 4. 取订阅/租户 az account show # 5. 建 SPN az ad sp create-for-rbac --name SPNName --role Azure Connected Machine Resource Administrator --scopes /subscriptions/SubscriptionID/resourceGroups/ResourceGroupName # → 输出 appId password # 6. 设置 Observability用上一步的 appId / password $observabilityConfiguration New-ApplianceObservabilityConfiguration -ResourceGroupName azure-disconnectedoperations -TenantId TenantID -Location Location -SubscriptionId SubscriptionId -ServicePrincipalId AppId -ServicePrincipalSecret (Password | ConvertTo-SecureString -AsPlainText -Force) Set-ApplianceObservabilityConfiguration -ObservabilityConfiguration $observabilityConfiguration # 7. 验证 Get-ApplianceObservabilityConfiguration也可以在 bootstrap 阶段通过Install-Appliance -ObservabilityConfiguration $observabilityConfiguration一起传省一次调用。4. 工作流Prerequisites§2选日志收集方法基于连通场景收集日志监控进度本地查看或送给 Microsoft4.1 Supported scenarios官方表格摘要场景收集方式设备能连 AzureOn-demand direct直传 Microsoft设备无法连 Azureair-gappedFallback—— mount VHD 取日志文档后续步骤cmdlet 用法、参数详解因抓取截断未完整显示按 OperationsModuleGet-Help即可。5. 官方没明说的事项30 天保留——是 Microsoft 端的数据保留本地日志保留周期没说Microsoft Support can access——没说P1/P2/P3 哪种 ticket 才能访问分批上传——没说单批多大合适文档没说上传速度限制完全 air-gapped 模式必须走 fallback 路径——但 fallback 也没说能不能自动 push 到 Microsoft应该是手工出网