Search code examples
azureremote-desktopevent-log

Retrieve EventLog from Azure Role using wevtutil


I am trying to retrieve event logs from the azure webrole remotely using the "wevtutil" command, though I keep receiving errors saying something like below.

The event query could not be opened. The RPC server is unavailable.

The command I am using looks like the one below.

wevtutil qe Application /r:some-web-role.cloudapp.net /u:admin /p:password /q:*[System[(Level=1)]]

Remote desktop is enabled for the webrole, but currently, there are 2 instances running, so I think I need to specify which instance you want to access, though I do not know how.

Should I specify the instance name after the hostname as below?

(*) {#instance_name#}

wevtutil qe Application /r:some-web-role.cloudapp.net:{#instance_name#} /u:admin /p:password /q:*[System[(Level=1)]]

Thanks in advance.


Solution

  • Is there any reason you are not using Azure Diagnostics, which was built to perform precisely this type of data capture and persistence?