Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,155 questions
1 answer
One of the answers was accepted by the question author.
Defender for Cloud - AWS onboarding
I am currently playing with DfC and decided to onboard single AWS account. My Azure subscription is set to forward DfC logs to custom LAW insted of using DfC default. Now, when i onboard AWS account, all the logs, alerts, sec scores etc, are also…
asked 2024-08-06T20:34:20.13+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 62%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPH%3C/text%3E%3C/svg%3E)
Paweł Haubus
20
Reputation points
accepted 2024-08-28T19:56:10.01+00:00
Paweł Haubus
20
Reputation points
1 answer
Monitor CPU live usage for 2 VMs using Dashboard
I have 2 machines, i want to monitor CPU usage for these 2 machine specifically, can you suggest how we can achieve this.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 37%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Azure change tracking alert
Hi all, I have configured Azure change tracking + AMA. It works properly. After that I have configured alert for getting notification of stopped windows service + autoresolve function. It works except one thing - I get resolve message after ~1h even if…
asked 2024-08-27T07:00:30.4166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 60%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVK%3C/text%3E%3C/svg%3E)
Viktor Korokhov
110
Reputation points
accepted 2024-08-28T13:53:52.05+00:00
Viktor Korokhov
110
Reputation points
1 answer
Log Analytics Workspace Table Stuck in ProvisioningState = Updating
We performed an ARM deployment to our Log Analytics Workspace where we have a custom table defined. The deployment contained no schema change for the table. However, the deployment failed: Error codeGatewayTimeout MessageThe gateway did not receive a…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 45%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
0 answers
how to get the destination o during DCR creation from Log analytics work space
how to get the destination o during DCR creation from Log analytics work space
2 answers
cross tenant alerting
Hi,following on from this notification https://azure.microsoft.com/en-us/updates/sending-a-log-search-alert-with-cross-tenant-target-resource-will-no-longer-be-supported/ the part 'As of March 15, 2024, this behavior will change and sending a log search…
asked 2024-05-06T16:27:50.5433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 44%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Robert Macdougall
20
Reputation points
answered 2024-08-28T11:55:25.6466667+00:00
Robert Macdougall
20
Reputation points
0 answers
How to migrate from log analytics agent to Azure monitor agent
Migration to Azure Update Manager | Azure Automation update management is getting retired. Azure Automation update management will be retired on 31 August 2024 We are currently using Azure Automation update management. On 31 August 2024, both the…
asked 2024-08-28T11:42:00.42+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 30%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPR%3C/text%3E%3C/svg%3E)
prince raj
21
Reputation points
asked 2024-08-28T11:42:00.42+00:00
prince raj
21
Reputation points
2 answers
One of the answers was accepted by the question author.
Azure PostgreSQL Flexible Server Logs, auto_explain.format escape characters
Hi, When attempting to read auto_explain plans out of either the Az PostgreSQL server logs (where you can download them) or out of something like LogAnalytics, the explain plan is messed up. Take for example, something like this. There is no easy way…
asked 2024-08-02T17:54:43.41+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 93%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EES%3C/text%3E%3C/svg%3E)
Eric Singer
20
Reputation points
accepted 2024-08-28T11:34:18.34+00:00
Eric Singer
20
Reputation points
1 answer
When will the Azure B2C JourneyInsight node support ConnectionStrings as well as Instrumentation Keys?
Instrumentation keys for Application Insights are going to be EOL in March 2025 (less than a year away):…
asked 2024-05-15T14:43:55.2566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(259.20000000000005, 69%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESN%3C/text%3E%3C/svg%3E)
Saul Nachman
5
Reputation points
commented 2024-08-28T11:28:30.26+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 80%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Jong, M. de (Michiel) (DIT_TR)
0
Reputation points
0 answers
Not able to fetch the data
Please suggest on below warning and fix for it
0 answers
Application Insights - AMPLS DNS Resolution
I have an anomaly when using AMPLS and Application Insights. I have a standard hybrid setup consists of: On-premises DCs Azure DCs Hub Spoke Vnet Azure Private DNS Zones If I provide Application insights via AMPLS, the connection string copied…
asked 2024-08-08T14:06:25.0566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 31%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERL%3C/text%3E%3C/svg%3E)
Robert Lehmann
0
Reputation points
edited the question 2024-08-28T07:20:24.2933333+00:00
KapilAnanth-MSFT
43,306
Reputation points Microsoft Employee
1 answer
How to migrate from Azure Log Analytics to Azure Monitor Agent
Hi, Currently I have Azure Log Analytics to monitor Azure Databricks account using KQL, but since Azure Log Analytics will be retired by end of Aug-24, then I need to migrate to Azure Monitor Agent. I am trying to explore how to migrate but I confuse the…
asked 2024-08-21T09:29:27.76+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 84%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Sazili Muhammad
0
Reputation points
edited the question 2024-08-28T06:28:50.95+00:00
SadiqhAhmed-MSFT
43,846
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Trouble configuring audit logs
Hi, Our Azure audit logs don't seem to be capturing events like adding or deleting a secret to/from key vault. I expected that security-related events would automatically be captured in the audit logs, but unfortunately this is not the case. Can anyone…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 19%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
0 answers
Resource Limits deserialization has failed with exception The data contract type 'Microsoft.WindowsAzure.GuestAgent.ExtensionStateMachine.Processes' cannot be deserialized because the required data member 'path' was not found.
Resource Limits deserialization has failed with exception The data contract type 'Microsoft.WindowsAzure.GuestAgent.ExtensionStateMachine.Processes' cannot be deserialized because the required data member 'path' was not found. Getting below error while…
asked 2024-08-19T09:01:07.8666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 63%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA_%3C/text%3E%3C/svg%3E)
Abhishek _
0
Reputation points
commented 2024-08-27T15:39:57.8066667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 60%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJE%3C/text%3E%3C/svg%3E)
Jaime Eduardo Figueroa Camejo
0
Reputation points
0 answers
How to prevent a flow of similar alerts from Azure Monitor?
We received hundreds of similar alerts from Azure Monitor for only 5 storage accounts: "A new recommendation is available: Storage accounts should restrict network access using virtual network rules" Is there a way to prevent such a flow of…
asked 2024-08-20T08:40:30.79+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 8%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EQC%3C/text%3E%3C/svg%3E)
Quattrocchi, Calogero
235
Reputation points
edited a comment 2024-08-27T15:23:46.78+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 52%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYD%3C/text%3E%3C/svg%3E)
Yusko, Don (CTR) - FS, VA
30
Reputation points
0 answers
How do I find all diagnostic settings that archive logs to storage accounts?
Earlier today, I received an auto-generated email that "The diagnostic settings retention feature will be retired on 30 September 2025" I would like to follow the migration guide (here:…
asked 2024-08-27T08:24:17.78+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 93%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWH%3C/text%3E%3C/svg%3E)
William Hvidtfelt Padkær Nielsen
20
Reputation points Microsoft Employee
asked 2024-08-27T08:24:17.78+00:00
William Hvidtfelt Padkær Nielsen
20
Reputation points Microsoft Employee
0 answers
AMA installed by creating DCR, but did not send heartbeat to Log Analytics
I have created a DCR which will automatically install AMA to VM. In VM, validated all required exe, include MonAgentCore.exe are running. But when query heartbeat, it did not update the heartbeat. Connection to endpoint checked, no issue.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(73.60000000000001, 6%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Expand TargetResources in AuditLogs
hi, i want to expand the TargetResources to display the values of displayName and UserPrincipalName in a separate row. Or is there another way to monitor the group assignments with the TableAuditLos? We need a KQL when a user was added or removed from a…
asked 2024-08-02T10:08:00.97+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 9%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMS%3C/text%3E%3C/svg%3E)
Markus Schädlich
20
Reputation points
accepted 2024-08-26T05:48:35.1266667+00:00
Markus Schädlich
20
Reputation points
1 answer
We have streamed logs of backup service, vm to log anaytics workspace will it create any impact after 30 aug. Since the Microsoft monitoring agent is going to be retired?
We have streamed logs of backup service, connected virtual machines to log anaytics workspace. Will it create any impact after 30 aug. Since the Microsoft monitoring agent is going to be retired
asked 2024-08-25T15:40:07.06+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 96%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Sivakumar Sabbana
0
Reputation points
answered 2024-08-26T05:33:53.5166667+00:00
Stanislav Zhelyazkov
23,191
Reputation points MVP
0 answers
Why are my Application Insights logs not being ingested from Azure Function App?
I recently updated my C# based Azure Functions App to use the Application Insights SDK instead of just passing the APPINSIGHTS_INSTRUMENTATIONKEY. The logs work perfectly when I run the app on my development machine using func start but when I deploy it…
asked 2024-08-23T06:30:09.7333333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 2%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENS%3C/text%3E%3C/svg%3E)
Niko Salminen
0
Reputation points
commented 2024-08-26T04:55:33.11+00:00
Vinodh247
15,951
Reputation points