Azure Monitor

1 answer

Windows Server 2025 AMA not getting data

Hello Folks, Under Log analytics we have created DCR for Windows Server 2025 but now issue AMA is not visible on server nor we are getting data. We are just getting Heartbeat info nothing else. Things tried so far:: Disabled Windows Firewall Manually…

asked

Akshay Purabia - PM AM 0

commented

Stanislav Zhelyazkov 28,676 MVP Volunteer Moderator

1 answer

Upcoming Retirement of Azure Service Map – Action Required by 30 September 2025

Hello MS Team, We are reaching out to request you to know how to proceed with upgrading from Azure Service Map in light of the upcoming retirement of Service Map on 30 September 2025. Kindly provide how to proceed further.

asked

Jagdish, Shubhankar 0

answered

Alex Burlachenko 11,610

0 answers

Do you have a forum for App Insights questions?

I am interested in finding out whether there is an online space specifically dedicated to Application Insights. If such a resource exists, could you please provide details on how to access it and what kind of information or support is available there? I…

asked

Cozma, Ioan 0

commented

Vinod Pittala 4,585 Microsoft External Staff Moderator

1 answer

Process(*) Performance Counters Not Appearing in Log Analytics Workspace

Hello Everyone, I’ve enabled the following performance counters in my Log Analytics workspace using the steps outlined in this Microsoft documentation: Collect Windows and Linux performance data sources with the Log Analytics agent Process(*)\ID…

asked

Swahela Mulla 95

commented

Swahela Mulla 95

1 answer

Identifying High CPU Usage Processes on Azure VM with AMA

Need assistance in determining which process is consuming the highest percentage of CPU usage on an Azure VM. The AMA agent extension is installed, and a DCR with the performance counter "\Processor(_Total)% Processor Time" has been added.…

asked

Ghulam Abbas 211

commented

Rahul Jorrigala 1,525 Microsoft External Staff Moderator

1 answer

what’s the logic behind the recipients of this email? Shouldn’t the service owner also be included?

Could you help me understand the criteria for selecting the recipients of this email? The service owner didn’t receive it — is there a specific reason for that? Please let me know if I can help with any details.

asked

Varkha Kundal 20 Microsoft Employee

answered

Varkha Kundal 20 Microsoft Employee

0 answers

Log Analytics Custom Table for IIS Logs with X-Forwarded-For Field

We need to ingest IIS logs with the custom field X-Forwarded-For(XFF). The documentation says you need to ingest these as custom text logs as XFF is not supported using the iis logs DCR. To do this we need to create a table to ingest the logs to. Using…

asked

KTSecure 0

commented

Naveena Patlolla 4,005 Microsoft External Staff Moderator

3 answers

Azure Portal Log Analytics bug

Found a bug in Azure portal

asked

Gleb Boushev 6

commented

Vinod Pittala 4,585 Microsoft External Staff Moderator

1 answer

How to get availability test response body in logs

I’m working with Azure Application Insights to monitor availability tests for a web application. I’m encountering below issue: My availability test results has response body and it is not logging in the availabilityResults table in Log Analytics. Could…

asked

Shekhar Nadide 201

commented

Vinod Pittala 4,585 Microsoft External Staff Moderator

0 answers

AMA Powershell setup script errors

For sentinel, I've set up the AMA firewall data connector in Azure and setup the DCR. I've installed the agent on my endpoint. I've read the guidance on Set Up the Azure Monitor Agent on Windows Client Devices - Azure Monitor | Microsoft Learn -…

asked

LostInTranslation 0

commented

Rahul Jorrigala 1,525 Microsoft External Staff Moderator

2 answers

Accessing centralized laws in Resource-context

Hi, our centralized laws is currently using use resource or workspace permissions as access control mode so that all our cloud admins can see all the data from different applications (vm + native components) using Log Analytics Reader. I know that…

asked

Bombbe 1,441

answered

Jana fisher 0

1 answer

We are unable to delete availibility tests under Application Insights

We are not able to delete Availibity tests even tho we get a confirm message. We have tried for more than a year now and keeps getting charger. Not even bought a Support plan and no way we can get in dialogue with Microsoft. What do we do here? Paid a…

asked

Jonas Spott 0

commented

Vinod Pittala 4,585 Microsoft External Staff Moderator

0 answers

I have developed the KQL and integrated with Alert rule along with the action group to trigger an email when a new resource is deployed.

I have developed the KQL and integrated with Alert rule along with the action group to trigger an email when a new resource is deployed. But alerts are not triggering as expected I have configured the alert rule on multiple subscriptions. Strangely…

asked

Nagaraj Kadade 0

edited a comment

Naveena Patlolla 4,005 Microsoft External Staff Moderator

0 answers

How to use authentication for Prometheus adapter so that it can fetch metrics from Azure Monitor Workspace?

Hello I have enabled Azure managed Prometheus and set up workspace. Now I want to do scaling of pods using HPA on a custom metrics, for which I have deployed the https://github.com/kubernetes-sigs/prometheus-adapter. I have enabled workload identity in…

asked

Balraj Kumar 25

commented

Rahul Jorrigala 1,525 Microsoft External Staff Moderator

1 answer

DCR based custom tables are not working

Hello All, I have a Linux server vm in Azure as my syslog server. My Meraki MX devices are sending logs to the syslog server into their individual folders, and they are flowing. I used to have custom logs in Azure Log Analytics that pulls these logs…

asked

Sing Kit Cheng 96

commented

Sing Kit Cheng 96

0 answers

Packaging Data Collection Components for Azure Sentinel Solutions: DCEs, DCRs, and Custom Logs

I need guidance on packaging Data Collection Endpoints (DCEs), Data Collection Rules (DCRs), and custom logs, as they aren't directly under Sentinel resources. How can I effectively include these components within my solution for proper deployment and…

asked

Omkar Jadhav 0

commented

Rahul Jorrigala 1,525 Microsoft External Staff Moderator

0 answers

Previously Working LAW Query Suddenly Broke; "query of basic logs table is not supported with the api"

A PowerShell Runbook that has run monthly for the past year and a half has suddenly stopped producing the Excel sheets we've come to expect. In the script, we make use of the following query on every Logs Analytics Workspace in the Tenant in order to…

asked

Alex 5

edited a comment

Andrejs 0

2 answers

Unable to remove auto-created Data Collection Endpoint in Azure, error "AuthorizationFailed : Operation not allowed"

I created a Log Analytics Workspace in Azure and enabled replication to another region. When replication is enabled, Azure automatically creates a Data Collection Endpoint (DCE). There was no Azure Monitoring Private Link Scope used and no Data…

asked

lodi 20

commented

lodi 20

2 answers

Discrepancies in Azure Activity Logs Schema and EventDataId Field between Event Hub and Log Analytics Workspace

Hello, We are currently forwarding Azure Activity Logs from Azure Monitor using Diagnostic Settings to both an Event Hub and a Log Analytics Workspace. We have observed some discrepancies that we would like to clarify: The schema of the logs received in…

asked

Margi Patel 0

commented

Stanislav Zhelyazkov 28,676 MVP Volunteer Moderator

1 answer

Need help to correct my KQL in Azure

I have created below KQL for APP to get the login count but output always coming as 0, I need help what to update here: AuditLogs | where AdditionalDetails contains "B2C_1A_RPBT_SignIn" //| where LoggedByService == "B2C" and…

asked

Sonika Sahu 60

accepted

Sonika Sahu 60

Filter

Content

3,673 questions with Azure Monitor tags

Windows Server 2025 AMA not getting data

Upcoming Retirement of Azure Service Map – Action Required by 30 September 2025

Do you have a forum for App Insights questions?

Process(*) Performance Counters Not Appearing in Log Analytics Workspace

Identifying High CPU Usage Processes on Azure VM with AMA

what’s the logic behind the recipients of this email? Shouldn’t the service owner also be included?

Log Analytics Custom Table for IIS Logs with X-Forwarded-For Field

Azure Portal Log Analytics bug

How to get availability test response body in logs

AMA Powershell setup script errors

Accessing centralized laws in Resource-context

We are unable to delete availibility tests under Application Insights

I have developed the KQL and integrated with Alert rule along with the action group to trigger an email when a new resource is deployed.

How to use authentication for Prometheus adapter so that it can fetch metrics from Azure Monitor Workspace?

DCR based custom tables are not working

Packaging Data Collection Components for Azure Sentinel Solutions: DCEs, DCRs, and Custom Logs

Previously Working LAW Query Suddenly Broke; "query of basic logs table is not supported with the api"

Unable to remove auto-created Data Collection Endpoint in Azure, error "AuthorizationFailed : Operation not allowed"

Discrepancies in Azure Activity Logs Schema and EventDataId Field between Event Hub and Log Analytics Workspace

Need help to correct my KQL in Azure