I've managed to get this working    I followed your suggestion of replacing rsyslog with syslog-ng. I'm not conviced this was required but hey..   It seems I was sending the syslog data to a log file when I needed to send it to the Azure agent listening on port 25224 on the local machine   As well as adding the details listed under Option 1 in the syslog-ng article you linked to, I also changed the line    destination df_meraki { file("/var/log/meraki.log"); };   to   destination df_meraki { udp("127.0.0.1" port(25224)); };   I found an MS article detailing how to configure syslogs for Azure monitor which pointed me to this line change https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-syslog ... View more