Ten Windows Server VMs each host IIS and have the Azure Monitor Agent installed. To collect IIS logs from each VM and store them in a Log Analytics workspace, what should you configure first?

To collect IIS logs from Azure VMs and send them to a Log Analytics workspace, you must configure diagnostic settings. Diagnostic settings define which logs and metrics to collect and where to send them (e.g., Log Analytics, Storage Account, Event Hubs). A data collection endpoint (DCE) is used with Azure Monitor Agent (AMA) to define how data is collected and sent, but diagnostic settings are the primary mechanism for configuring the collection of platform logs like IIS logs. An Azure Monitor Private Link Scope (AMPLS) and a private endpoint are related to private network access for Azure Monitor, not log collection configuration. VM insights is a monitoring solution that uses AMA but doesn't directly configure IIS log collection; diagnostic settings do that.