Microsoft Azure Security Technologies (AZ-500)

Azure Monitor

Explore Azure Monitor

Azure Monitor is a robust tool within the Microsoft Azure suite that offers a comprehensive platform for collecting, storing, and analyzing monitoring data. The data platform includes several types of data stores such as logs, metrics, traces, and change records—all gathered from diverse sources like applications, operating systems, Azure resources, subscriptions, tenants, or custom data providers.

Data Consumption and Analysis

Once collected, monitoring data can be consumed by a myriad of services. Azure Monitor tools are designed to offer precise insights, dynamic visualizations, and in-depth analysis to meet your operational needs. For example:

  • To generate actionable insights, you can leverage tools like Application Insights, Container Insights, VM Insights, and Network Insights. These come with detailed visualizations and interactive workbooks that simplify data interpretation.
  • For visual data representation, explore options such as Azure Workbooks, dashboards, Power BI, and Grafana.
  • For advanced analysis, use Metric Explorer to examine time-series metrics or Log Analytics to dive deep into logs. Additionally, Change Analysis helps you monitor and review system modifications.

When critical events occur, Azure Monitor supports alert-based actions. For instance, an increase in CPU utilization can trigger autoscale actions to adjust resource allocation automatically. Moreover, integration with third-party applications is seamless through services like Event Hubs, Logic Apps, or Import-Export APIs.

Overview of the Azure Monitor Suite

The Azure Monitor ecosystem is divided into two primary areas:

  • Data Sources: These serve as the backend of the monitoring platform and include logs, metrics, traces, and change records.
  • Data Consumers: On this end, various tools and services utilize the collected data to provide insights and analytics.

Understanding Key Data Types

Azure Monitor categorizes its data into four core types:

  • Metrics: These are numerical snapshots of system performance captured over time. Stored as time-series data, metrics are ideal for tracking values like CPU usage (e.g., 80% at time 555 and 81% at time 556).

  • Logs: These textual records are generated by systems (e.g., events or syslogs). For instance, any entry in the Windows Event Viewer qualifies as a log.

  • Traces: Traces offer a detailed journey of a request across various services and components, helping you identify delays and understand system call flows.

  • Changes: Change tracking is essential for application management. Powered by Azure Resource Graph, Change Analysis records every update or modification—such as a change to a VM property—allowing you to review both the changes and the previous values.

Core Features of Azure Monitor

Azure Monitor's functionality can be summarized into three essential features that ensure the health and performance of your applications and infrastructure:

  1. Monitor and visualize metrics.
  2. Query and analyze logs.
  3. Send alerts and notifications.

Note

Utilizing these core features provides a robust framework for proactive system management and improved operational efficiency.

The image is a diagram explaining Azure Monitor, showing its components and functionalities like monitoring metrics, analyzing logs, and sending alerts. It includes various elements such as applications, containers, and dashboards.

In this lesson, we will start by exploring metrics and logs to build a strong foundation for understanding how Azure Monitor operates. This will equip you with the insights needed to leverage its capabilities for enhanced application insights and better overall system management.

For more information, check out the Azure Monitor Documentation.

Watch Video

Watch video content

Previous
Introduction