Recommended method
Self-Managed OTel Collector — install the Collector as a systemd service or Windows service to collect host telemetry and accept application logs, metrics, and traces over OTLP. For VM Scale Sets, bake it into the image or install it through cloud-init or a custom-script extension. On Windows VMs, collect Windows Event Log channels (Application, System, Security) with thewindowseventlog receiver and file-based logs such as IIS access logs with the filelog receiver — see Collecting Windows OS Logs.
Alternatives
- Azure Event Hub Forwarder — for VM platform / diagnostic logs exported through Azure Monitor diagnostic settings.

