title: How to configure a VM to feed its Event Logs into App Insights or the Data Lake?
body: <p>We want to add Azure cloud compute audit logs to Data Lake.  For Virtual Machines, these would be Event Logs, and includes one time historical and ongoing. We want to do this for auditing purposes.  Is there an option we can enable for this? We are trying to avoid having to feed this data manually extracting and then loading the data ourselves. So if there is an option in place that would be ideal!!</p>
  <p>I looked into the possibility of <a href="https://docs.microsoft.com/en-us/azure/azure-monitor/app/asp-net-trace-logs#using-etw-events" rel="nofollow noreferrer">ETW Events</a> but isnt that just useful at the application level and not the VM level?</p>
  <p>Ive also looked at <a href="https://stackoverflow.com/questions/49403044/is-it-possible-to-log-windows-events-to-application-insights">this thread</a> and there was a comment referring to an alternative solution called &quot;Log Analytics&quot; from Azure but clicking the <a href="https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-quick-collect-windows-computer#collect-event-and-performance-data" rel="nofollow noreferrer">link</a> leads to an unknown page</p>