Azure Site Recovery monitoring data reference
This article contains all the monitoring reference information for this service.
See Monitor Azure Site Recovery for details on the data you can collect for Azure Site Recovery and how to use it.
Metrics
There are no automatically collected metrics for Azure Site Recovery. All the automatically collected metrics for the Microsoft.RecoveryServices/Vaults namespace are for the Azure Backup service. For information about Azure Backup metrics, see Monitor Azure Backup.
Resource logs
This section lists the types of resource logs you can collect for this service. The section pulls from the list of all resource logs category types supported in Azure Monitor.
Supported resource logs for Microsoft.RecoveryServices/Vaults
Note that some of the following logs apply to Azure Backup and others apply to Azure Site Recovery, as noted in the Category display name column.
| Category | Category display name | Log table | Supports basic log plan | Supports ingestion-time transformation | Example queries | Costs to export |
|---|---|---|---|---|---|---|
AddonAzureBackupAlerts |
Addon Azure Backup Alert Data | AddonAzureBackupAlerts | No | Yes | No | |
AddonAzureBackupJobs |
Addon Azure Backup Job Data | AddonAzureBackupJobs | No | Yes | Queries | No |
AddonAzureBackupPolicy |
Addon Azure Backup Policy Data | AddonAzureBackupPolicy | No | Yes | No | |
AddonAzureBackupProtectedInstance |
Addon Azure Backup Protected Instance Data | AddonAzureBackupProtectedInstance | No | Yes | No | |
AddonAzureBackupStorage |
Addon Azure Backup Storage Data | AddonAzureBackupStorage | No | Yes | Queries | No |
ASRReplicatedItems |
Azure Site Recovery Replicated Items Details | ASRReplicatedItems This table contains details of Azure Site Recovery (ASR) replicated items, such as associated vault, policy, replication health, failover readiness. etc. Data is pushed once a day to this table for all replicated items, to provide the latest information for each item. |
No | No | Queries | Yes |
AzureBackupOperations |
Azure Backup Operations | AzureBackupOperations This table contains details of Azure Backup operations. |
No | No | Queries | Yes |
AzureBackupReport |
Azure Backup Reporting Data | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
AzureSiteRecoveryEvents |
Azure Site Recovery Events | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
AzureSiteRecoveryJobs |
Azure Site Recovery Jobs | ASRJobs This table contains records of Azure Site Recovery (ASR) jobs such as failover, test failover, reprotection etc., with key details for monitoring and diagnostics, such as the replicated item information, duration, status, description and so on. Whenever an ASR job is completed (i.e., succeeded or failed), a corresponding record for the job is sent to this table. You can view history of ASR jobs by querying this table over a larger time range, provided your workspace has the required retention configured. |
No | No | Queries | No |
AzureSiteRecoveryProtectedDiskDataChurn |
Azure Site Recovery Protected Disk Data Churn | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
AzureSiteRecoveryRecoveryPoints |
Azure Site Recovery Recovery Points | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
AzureSiteRecoveryReplicatedItems |
Azure Site Recovery Replicated Items | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
AzureSiteRecoveryReplicationDataUploadRate |
Azure Site Recovery Replication Data Upload Rate | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
AzureSiteRecoveryReplicationStats |
Azure Site Recovery Replication Stats | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
CoreAzureBackup |
Core Azure Backup Data | CoreAzureBackup | No | Yes | Queries | No |
Azure Monitor Logs tables
This section lists the Azure Monitor Logs tables relevant to this service, which are available for query by Log Analytics using Kusto queries. The tables contain resource log data and possibly more depending on what is collected and routed to them.
Recovery Services Vaults
Microsoft.RecoveryServices/Vaults
Event logs available for Azure Site Recovery
Azure Site Recovery provides the following resource-specific and legacy tables. Each event provides detailed data on a specific set of site recovery related artifacts.
Resource-specific tables:
Legacy tables:
- Azure Site Recovery Events
- Azure Site Recovery Replicated Items
- Azure Site Recovery Replication Stats
- Azure Site Recovery Points
- Azure Site Recovery Replication Data Upload Rate
- Azure Site Recovery Protected Disk Data Churn
- Azure Site Recovery Replicated Item Details
Log Analytics data model
This section describes the Log Analytics data model for Azure Site Recover that's added to the Azure Diagnostics table (if your vaults are configured with diagnostics settings to send data to a Log Analytics workspace in Azure Diagnostics mode). You can use this data model to write queries on Log Analytics data to create custom alerts or reporting dashboards.
To understand the fields of each Site Recovery table in Log Analytics, review the details for the Azure Site Recovery Replicated Item Details and Azure Site Recovery Jobs tables. You can find information about the diagnostic tables.
Tip
Expand this table for better readability.
| Category | Category Display Name | Log Table | Supports basic log plan | Supports ingestion-time transformation | Example queries | Costs to export |
|---|---|---|---|---|---|---|
| ASRReplicatedItems | Azure Site Recovery Replicated Item Details | ASRReplicatedItems This table contains details of Azure Site Recovery replicated items, such as associated vault, policy, replication health, failover readiness. etc. Data is pushed once a day to this table for all replicated items, to provide the latest information for each item. |
No | No | Queries | Yes |
| AzureSiteRecoveryJobs | Azure Site Recovery Jobs | ASRJobs This table contains records of Azure Site Recovery jobs such as failover, test failover, reprotection etc., with key details for monitoring and diagnostics, such as the replicated item information, duration, status, description, and so on. Whenever an Azure Site Recovery job is completed (that is, succeeded or failed), a corresponding record for the job is sent to this table. You can view history of Azure Site Recovery jobs by querying this table over a larger time range, provided your workspace has the required retention configured. |
No | No | Queries | No |
| AzureSiteRecoveryEvents | Azure Site Recovery Events | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
| AzureSiteRecoveryProtectedDiskDataChurn | Azure Site Recovery Protected Disk Data Churn | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
| AzureSiteRecoveryRecoveryPoints | Azure Site Recovery Points | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
| AzureSiteRecoveryReplicatedItems | Azure Site Recovery Replicated Items | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
| AzureSiteRecoveryReplicationDataUploadRate | Azure Site Recovery Replication Data Upload Rate | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
| AzureSiteRecoveryReplicationStats | Azure Site Recovery Replication Stats | AzureDiagnostics Logs from multiple Azure resources. |
No | No | Queries | No |
ASRReplicatedItems
This is a resource specific table that contains details of Azure Site Recovery replicated items, such as associated vault, policy, replication health, failover readiness. etc. Data is pushed once a day to this table for all replicated items, to provide the latest information for each item.
Fields
| Attribute | Value |
|---|---|
| Resource types | microsoft.recoveryservices/vaults |
| Categories | Audit |
| Solutions | LogManagement |
| Basic log | No |
| Ingestion-time transformation | No |
| Sample Queries | Yes |
Columns
| Column Name | Type | Description |
|---|---|---|
| ActiveLocation | string | Current active location for the replicated item. If the item is in failed over state, the active location is the secondary (target) region. Otherwise, it is the primary region. |
| BilledSize | real | The record size in bytes |
| Category | string | The category of the log. |
| DatasourceFriendlyName | string | Friendly name of the datasource being replicated. |
| DatasourceType | string | ARM type of the resource configured for replication. |
| DatasourceUniqueId | string | Unique ID of the datasource being replicated. |
| FailoverReadiness | string | Denotes whether there are any configuration issues that could affect the failover operation success for the Azure Site Recovery replicated item. |
| IRProgressPercentage | int | Progress percentage of the initial replication phase for the replicated item. |
| IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
| LastHeartbeat | datetime | Time at which the Azure Site Recovery agent associated with the replicated item last made a call to the Azure Site Recovery service. Useful for debugging error scenarios where you wish to identify the time at which issues started arising. |
| LastRpoCalculatedTime | datetime | Time at which the RPO was last calculated by the Azure Site Recovery service for the replicated item. |
| LastSuccessfulTestFailoverTime | datetime | Time of the last successful failover performed on the replicated item. |
| MultiVMGroupId | string | For scenarios where multi-VM consistency feature is enabled for replicated virtual machines, this field specifies the ID of the multi-VM group associated with the replicated virtual machine. |
| OperationName | string | The name of the operation. |
| OSFamily | string | OS family of the resource being replicated. |
| PolicyFriendlyName | string | Friendly name of the replication policy applied to the replicated item. |
| PolicyId | string | ARM ID of the replication policy applied to the replicated item. |
| PolicyUniqueId | string | Unique ID of the replication policy applied for the replicated item. |
| PrimaryFabricName | string | Represents the source region of the replicated item. By default, the value is the name of the source region, however if you have specified a custom name for the primary fabric while enabling replication, then that custom name shows up under this field. |
| PrimaryFabricType | string | Fabric type associated with the source region of the replicated item. Depending on whether the replicated item is an Azure virtual machine, Hyper-V virtual machine or VMware virtual machine, the value for this field varies. |
| ProtectionInfo | string | Protection status of the replicated item. |
| RecoveryFabricName | string | Represents the target region of the replicated item. By default, the value is the name of the target region. However, if you specify a custom name for the recovery fabric while enabling replication, then that custom name shows up under this field. |
| RecoveryFabricType | string | Fabric type associated with the target region of the replicated item. Depending on whether the replicated item is an Azure virtual machine, Hyper-V virtual machine or VMware virtual machine, the value for this field varies. |
| RecoveryRegion | string | Target region to which the resource is replicated. |
| ReplicatedItemFriendlyName | string | Friendly name of the resource being replicated. |
| ReplicatedItemId | string | ARM ID of the replicated item. |
| ReplicatedItemUniqueId | string | Unique ID of the replicated item. |
| ReplicationHealthErrors | string | List of issues that might be affecting the recovery point generation for the replicated item. |
| ReplicationStatus | string | Status of replication for the Azure Site Recovery replicated item. |
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
| SourceResourceId | string | ARM ID of the datasource being replicated. |
| SourceSystem | string | The agent type that collected the event. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
| TenantId | string | The Log Analytics workspace ID |
| TimeGenerated | datetime | The timestamp (UTC) when the log was generated. |
| Type | string | The name of the table |
| VaultLocation | string | Location of the vault associated with the replicated item. |
| VaultName | string | Name of the vault associated with the replicated item. |
| VaultType | string | Type of the vault associated with the replicated item. |
| Version | string | The API version. |
AzureSiteRecoveryJobs
This table contains records of Azure Site Recovery jobs such as failover, test failover, reprotection etc., with key details for monitoring and diagnostics, such as the replicated item information, duration, status, description, and so on. Whenever an Azure Site Recovery job is completed (that is, succeeded or failed), a corresponding record for the job is sent to this table. You can view history of Azure Site Recovery jobs by querying this table over a larger time range, provided your workspace has the required retention configured.
Fields
| Attribute | Value |
|---|---|
| Resource types | microsoft.recoveryservices/vaults |
| Categories | Audit |
| Solutions | LogManagement |
| Basic log | No |
| Ingestion-time transformation | No |
| Sample Queries | Yes |
Columns
| Column Name | Type | Description |
|---|---|---|
| _BilledSize | real | The record size in bytes |
| Category | string | The category of the log. |
| CorrelationId | string | Correlation ID associated with the Azure Site Recovery job for debugging purposes. |
| DurationMs | int | Duration of the Azure Site Recovery job. |
| EndTime | datetime | End time of the Azure Site Recovery job. |
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
| JobUniqueId | string | Unique ID of the Azure Site Recovery job. |
| OperationName | string | Type of Azure Site Recovery job, for example, Test failover. |
| PolicyFriendlyName | string | Friendly name of the replication policy applied to the replicated item (if applicable). |
| PolicyId | string | ARM ID of the replication policy applied to the replicated item (if applicable). |
| PolicyUniqueId | string | Unique ID of the replication policy applied to the replicated item (if applicable). |
| ReplicatedItemFriendlyName | string | Friendly name of replicated item associated with the Azure Site Recovery job (if applicable). |
| ReplicatedItemId | string | ARM ID of the replicated item associated with the Azure Site Recovery job (if applicable). |
| ReplicatedItemUniqueId | string | Unique ID of the replicated item associated with the Azure Site Recovery job (if applicable). |
| ReplicationScenario | string | Field used to identify whether the replication is being done for an Azure resource or an on-premises resource. |
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
| ResultDescription | string | Result of the Azure Site Recovery job. |
| SourceFriendlyName | string | Friendly name of the resource on which the Azure Site Recovery job was executed. |
| SourceResourceGroup | string | Resource Group of the source. |
| SourceResourceId | string | ARM ID of the resource on which the Azure Site Recovery job was executed. |
| SourceSystem | string | The agent type that collected the event. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
| SourceType | string | Type of resource on which the Azure Site Recovery job was executed. |
| StartTime | datetime | Start time of the Azure Site Recovery job. |
| Status | string | Status of the Azure Site Recovery job. |
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
| TenantId | string | The Log Analytics workspace ID |
| TimeGenerated | datetime | The timestamp (UTC) when the log was generated. |
| Type | string | The name of the table |
| VaultLocation | string | Location of the vault associated with the Azure Site Recovery job. |
| VaultName | string | Name of the vault associated with the Azure Site Recovery job. |
| VaultType | string | Type of the vault associated with the Azure Site Recovery job. |
| Version | string | The API version. |
Activity log
The linked table lists the operations that can be recorded in the activity log for this service. These operations are a subset of all the possible resource provider operations in the activity log.
For more information on the schema of activity log entries, see Activity Log schema.
Related content
- See Monitor Site Recovery for a description of monitoring Site Recovery.
- See Monitor Azure resources with Azure Monitor for details on monitoring Azure resources.