azure-monitor

v2026.09.24

Expert knowledge for Azure Monitor development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring Log Analytics, Application Insights, DCRs/agents, autoscale alerts, or Prometheus/Grafana monitoring, and other Azure Monitor related development tasks. Not for Azure Managed Grafana (use azure-managed-grafana), Azure Network Watcher (use azure-network-watcher), Azure Service Health (use azure-service-health), Azure Defender For Cloud (use azure-defender-for-cloud).

GitHub
安装命令
npx skhub add microsoftdocs/azure-monitor
Markdown
SKILL.md

Azure Monitor Skill

This skill provides expert guidance for Azure Monitor. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLocationDescription
TroubleshootingL37-L110Diagnosing and fixing Azure Monitor data collection, agents, alerts, pipelines, workspaces, Application Insights, containers, DevCenter, and VM performance issues using logs, tools, and troubleshooters
Best PracticesL111-L148Best practices for configuring, tuning, and scaling Azure Monitor (logs, metrics, alerts, autoscale, AKS/VMs, OpenTelemetry/Prometheus) to improve performance, reliability, and cost efficiency.
Decision MakingL149-L186Guides for choosing Azure Monitor agents, alerts, metrics/logs options, cost planning, and migration paths from legacy tools (MMA, WAD/LAD, SCOM, Splunk, Prometheus, SDKs) to modern Azure Monitor.
Architecture & Design PatternsL187-L192Designing end-to-end Azure Monitor architectures, including enterprise-scale layouts, data flows, and secure network topologies using Private Link for monitoring traffic.
Limits & QuotasL193-L220Limits, quotas, performance, and scale behavior for Azure Monitor alerts, logs, metrics, Prometheus, Container Insights, Application Insights, Workbooks, and supported regions/resources.
SecurityL221-L290Securing Azure Monitor and its data: auth, TLS, networking, RBAC, policies, private access, plus auditing/logging for Databricks, MDE, healthcare, Synapse, and threat intel.
Configurationconfiguration.mdConfiguring Azure Monitor end to end: agents, DCRs, pipelines, alerts, logs/metrics schemas, autoscale, workbooks, and per‑service monitoring for VMs, AKS, apps, networks, and SaaS.
Integrations & Coding Patternsintegrations.mdIntegrating Azure Monitor with apps and tools: agents, REST/CLI, webhooks, ITSM, Prometheus/Grafana, and KQL patterns for querying many Azure/third‑party log tables.
Deploymentdeployment.mdDeploying and configuring Azure Monitor agents, VM insights, policies, and .NET profiling/snapshot debugging tools across VMs, App Service, Functions, containers, and Service Fabric.

Troubleshooting

TopicURL
Troubleshoot Azure Log Analytics Linux agent issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-linux-troubleshoot
Troubleshoot Log Analytics agent for Windowshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-windows-troubleshoot
Monitor and troubleshoot Azure Monitor Agent health at scalehttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-health
Troubleshoot Azure Monitor agent on Linux VMs and scale setshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-linux-vm
Fix syslog collection issues with Azure Monitor Agent on Linuxhttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-linux-vm-rsyslog
Fix Azure Monitor agent problems on Windows Arc servershttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-windows-arc
Diagnose Azure Monitor agent issues on Windows VMshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-windows-vm
Install and troubleshoot Azure Monitor Agent on Windows clientshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-windows-client
Troubleshoot Azure Diagnostics extension issues on Azure resourceshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-troubleshooting
Use Azure Monitor Agent Linux troubleshooter effectivelyhttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/troubleshooter-ama-linux
Use AMA Windows troubleshooter to diagnose agent issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/troubleshooter-ama-windows
Diagnose issues with Azure Log Analytics VM extensionhttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/vmext-troubleshoot
Use deep investigation examples to diagnose incidentshttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-deep-investigation-examples
Troubleshoot Azure Copilot Observability Agent issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-troubleshooting
Troubleshoot tenant-level Azure service health alertshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-create-tenant-level-service-heath-alerts
Diagnose and fix common Azure Monitor alert issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-troubleshoot
Diagnose and fix Azure Monitor log alert issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-troubleshoot-log
Resolve problems with Azure Monitor metric alertshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-troubleshoot-metric
Resolve ITSMC dashboard connector status errorshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-dashboard-errors
Fix ServiceNow sync and token issues for ITSMChttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-resync-servicenow
Troubleshoot Azure Monitor ITSM Connector issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-troubleshoot-overview
Interpret and resolve test action group error codeshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/test-action-group-errors
Investigate failures and performance with Application Insights viewshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/failures-performance-transactions
Troubleshoot telemetry issues using Application Insights SDK statshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/sdk-stats
Troubleshoot Azure Monitor autoscale behavior and actionshttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-troubleshoot
Use Live Data in Container insights for real-time AKS troubleshootinghttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-livedata-overview
Diagnose and fix Azure Monitor container log issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-troubleshoot
Troubleshoot Prometheus metrics collection in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/prometheus-metrics-troubleshoot
Monitor and troubleshoot DCR-based data collection in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-monitor
Troubleshoot Azure Monitor pipeline issues and errorshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-faq
Troubleshoot Azure Monitor pipeline deployment and data issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-troubleshoot
Troubleshoot stopped data collection in Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/data-collection-troubleshoot
Diagnose and alert on Log Analytics workspace healthhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-workspace-health
Monitor and troubleshoot Log Analytics workspace healthhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/monitor-workspace
Create and manage Azure Monitor summary ruleshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/summary-rules
Monitor and troubleshoot ingestion and query issues in Azure Monitor workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-monitor-health
Troubleshoot Azure Monitor metric chart issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-troubleshoot
Troubleshoot Application Insights Code Optimizations setup issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/optimization-insights/code-optimizations-troubleshoot
Troubleshoot Application Insights .NET Profiler issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/profiler/profiler-troubleshooting
Query AzureMonitorPipelineLogErrors for ingestion issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/azuremonitorpipelinelogerrors
Investigate CloudAuditEvents with Kusto querieshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/cloudauditevents
Analyze CloudProcessEvents for suspicious activityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/cloudprocessevents
Detect risky CloudStorageAggregatedEvents with querieshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/cloudstorageaggregatedevents
Query and analyze EdgeActionServiceLog in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/edgeactionservicelog
Use ZTSJobStatus log queries to diagnose workspace connectivityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/ztsjobstatus
Investigate Grafana alert authentication failures in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/agsgrafanaalertauthfailure
Interpret AzureMonitorPipelineLogErrors table entrieshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/azuremonitorpipelinelogerrors
Investigate DCR-based data collection log errorshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/dcrlogerrors
Use DCRLogTroubleshooting for DCR flow diagnosticshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/dcrlogtroubleshooting
Diagnose DevCenter dev box agent health issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devcenteragenthealthlogs
Troubleshoot DevCenter dev box connection eventshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devcenterconnectionlogs
Investigate DevCenter dev box and environment operationshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devcenterdiagnosticlogs
Analyze DevCenter resource operation and health logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devcenterresourceoperationlogs
Investigate DCR-based data collection errors via logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-insights-datacollectionrules
Troubleshoot Azure Monitor pipeline groups with error logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-monitor-pipelinegroups
Diagnose failed Synapse DX ingestion operationshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/synapsedxfailedingestion
Audit Toolchain orchestrator API interactionshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/touseraudits
Diagnose Toolchain orchestrator user request failureshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/touserdiagnostics
Investigate Azure Time Series Insights ingress errorshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/tsiingress
Monitor device-specific update compliance alertshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/ucdevicealert
Investigate update compliance alerts per devicehttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/ucupdatealert
Troubleshoot Application Insights Snapshot Debugger issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/snapshot-debugger/snapshot-debugger-troubleshoot
Troubleshoot workbook-based insights in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/troubleshoot-workbooks
Access deprecated troubleshooting guides in Workbookshttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-access-troubleshooting-guide
Troubleshoot Copilot issues in Azure Workbookshttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-copilot-troubleshoot
Troubleshoot Azure VM performance with PerfInsightshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics
Analyze Azure VM PerfInsights diagnostic reportshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics-analyze
Use Azure Performance Diagnostics extension for VM issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics-extension
Use Performance Diagnostics to troubleshoot Azure VMshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics-run
Troubleshoot Azure Monitor VM agent onboarding issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/vm-enable-troubleshoot

Best Practices

TopicURL
Optimize telemetry for accurate Observability Agent investigationshttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-best-practices
Author custom instructions for Observability Agent correlationhttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-custom-instructions
Optimize Azure Monitor log alert queries for performancehttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-log-query
Configure single metric alerts for multiple time serieshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-metric-multiple-time-series-single-rule
Apply architectural best practices for Azure Monitor alertshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/best-practices-alerts
Configure OpenTelemetry sampling for Application Insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/opentelemetry-sampling
Apply Azure Monitor autoscale best practices across serviceshttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-best-practices
Implement common autoscale patterns in Azurehttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-common-scale-patterns
Avoid and mitigate autoscale flapping scenarioshttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-flapping
Use multiple autoscale profiles for time-based scalinghttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-multiprofile
Apply Azure Monitor best practices for AKS clustershttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/best-practices-containers
Optimize Container Insights monitoring costs and configurationhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-cost
Design cost-effective alerting for AKS in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/cost-effective-alerting
Configure recommended Kubernetes metric alerts in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/kubernetes-metric-alerts
Apply Azure Monitor best practices for Kuberneteshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/monitor-kubernetes
Apply best practices for Azure Monitor data collection ruleshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-rule-best-practices
Apply sample Azure Monitor transformation querieshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-transformations-samples
Optimize Azure Monitor configuration to reduce costhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-cost
Apply Azure Monitor best practices for multicloudhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-multicloud
Configure Azure Monitor for operational excellencehttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-operation
Apply performance best practices in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-performance
Apply reliability best practices in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-reliability
Analyze Log Analytics usage to control Azure Monitor costshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/analyze-usage
Apply architectural best practices for Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/best-practices-logs
Parse and structure text data in Azure Monitor logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/parse-text
Optimize Azure Monitor Logs query performancehttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/query-optimization
Best practices for scaling Azure Monitor workspaces with Prometheushttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice
Migrate from metrics API to getBatch for performancehttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/migrate-to-batch-api
Best practices for PromQL on OpenTelemetry metrics in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-opentelemetry-best-practices
Apply PromQL best practices for Azure system metricshttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-system-metrics-best-practices
Optimize workbook performance with criteria parametershttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-criteria
Apply Azure Monitor best practices for VM monitoringhttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/best-practices-vm
Design effective VM alerts with Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine-alerts
Configure Azure Monitor data collection for virtual machineshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine-data-collection

Decision Making

TopicURL
Map MMA data fields to Azure Monitor Agent schemashttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-data-field-differences
Plan and execute migration from Log Analytics agent to AMAhttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration
Generate DCR configs to migrate from MMA to AMAhttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration-data-collection-rule-generator
Plan migration from Log Analytics Agent to Azure Monitor Agenthttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration-helper-workbook
Decide and migrate from WAD/LAD to Azure Monitor Agenthttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration-wad-lad
Plan and manage costs for Observability Agent usagehttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-billing
Choose appropriate Azure Monitor alert typeshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-types
Migrate from Application Insights SDKs to OpenTelemetryhttps://learn.microsoft.com/en-us/azure/azure-monitor/app/migrate-to-opentelemetry
Transition from Container Monitoring Solution to Container Insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-transition-solution
Choose OpenTelemetry integration options with Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-options
Choose Azure Monitor OTLP ingestion approachhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-summary
Choose between Azure Monitor metrics export and data plane APIhttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-plane-versus-metrics-export
Plan and size Azure Monitor pipeline throughputhttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-sizing
Decide how to migrate SCOM monitoring to Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/azure-monitor-operations-manager
Estimate Azure Monitor costs with pricing calculatorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/cost-estimate
Map Azure Monitor charges to billing meter nameshttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/cost-meters
Migrate from Azure Monitor Logs batch and beta APIshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/migrate-batch-and-beta
Plan Azure Monitor availability zone protection for workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/availability-zones
Plan and optimize Azure Monitor Logs costshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/cost-logs
Decide and configure Azure Monitor dedicated clustershttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-dedicated-clusters
Choose and configure Azure Monitor Logs table planshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-table-plans
Plan migration from Splunk to Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/migrate-splunk-to-azure-monitor-logs
Choose and design Azure Log Analytics workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/workspace-design
Plan migration from self-hosted Prometheus to Azure Monitor managed Prometheushttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-migrate
Understand billing rules for Azure diagnostic settingshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings-faq
Migrate Azure Monitor retention to Storage lifecyclehttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/migrate-to-azure-storage-lifecycle-policy
Migrate from SCOM Managed Instance to Azure Monitor DCRshttps://learn.microsoft.com/en-us/azure/azure-monitor/scom-manage-instance/migrate-to-azure-monitor
Plan migration from Azure Monitor SCOM Managed Instancehttps://learn.microsoft.com/en-us/azure/azure-monitor/scom-manage-instance/migration-faq-scom-manage-instance
Plan migration from SCOM Managed Instance to SCOM or Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/scom-manage-instance/migration-overview
Choose the right Azure Monitor visualization toolhttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/best-practices-visualize
Decide when to copy dashboards to Azure Managed Grafanahttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/visualize-copy-to-managed-grafana
Choose Grafana options for Azure Monitor datahttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/visualize-grafana-overview
Choose OpenTelemetry vs logs-based VM metricshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/metrics-opentelemetry-guest
Decide and migrate from logs-based to metrics VM monitoringhttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/vm-opentelemetry-migrate

Architecture & Design Patterns

TopicURL
Design an enterprise monitoring architecture with Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/enterprise-monitoring-architecture
Design Azure Monitor Private Link network architecturehttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/private-link-design

Limits & Quotas

TopicURL
Use supported Azure Monitor Agent extension versionshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-extension-versions
Plan Azure Monitor Agent performance for gateway forwardinghttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-performance
Manage Azure Monitor alert instance retention and statehttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-manage-alert-instances
Monitor and interpret log alert rule health in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/log-alert-rule-health
Deploy log search alert rules with ARM templates and size limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/resource-manager-alerts-log
Set up and tune Application Insights availability testshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/availability
Configure predictive autoscale thresholds and history requirementshttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-predictive
Enable high-scale log collection limits in Container Insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-high-scale
Use region mappings for Container Insights and Log Analyticshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-region-mapping
Configure autoscaling limits for Azure Managed Prometheus addon podshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/prometheus-metrics-scrape-autoscaling
Plan Prometheus scraping performance and scale in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/prometheus-metrics-scrape-scale
Check supported resources and regions for metrics exporthttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/metrics-export-reference
Review supported resource types and regions for platform logshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/platform-logs-reference
Review Azure Monitor service limits and quotashttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/service-limits
Understand caching behavior in Logs Query APIhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/cache
Use cross-workspace query limits in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/cross-workspace-queries
Configure Azure Monitor logs query timeouts and limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/timeouts
Configure Azure Monitor logs query timeouts and limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/timeouts
Configure daily ingestion caps for Log Analytics workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/daily-cap
Monitor Azure Monitor workspace ingestion limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-monitor-ingest-limits
Technical details and limits for Azure Monitor managed Prometheushttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-metrics-details
Reference supported AKS managed cluster metricshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-containerservice-managedclusters-metrics
Azure Workbooks data source and parameter limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-limits
Use Azure Workbooks visualization types effectivelyhttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-visualizations

Security

TopicURL
Understand data handling and governance for Observability Agenthttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-governance-faq
Secure ITSM integrations with Azure Monitor Secure Webhookhttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/it-service-management-connector-secure-webhook-connections
Configure Azure for Secure Webhook ITSM integrationshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsm-connector-secure-webhook-connections-azure-configuration
Use Application Insights smart detection to identify security issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/proactive-application-security-detection-pack
Enable Microsoft Entra authentication for Application Insights ingestionhttps://learn.microsoft.com/en-us/azure/azure-monitor/app/azure-ad-authentication
Configure IP handling and geolocation in Application Insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/ip-collection
Configure legacy authentication for Container insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-authentication
Configure secure access to Live Data in Container insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-livedata-setup
Choose TLS options for Azure Monitor pipeline ingestionhttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-tls
Configure automated TLS certificates for Azure Monitor pipelinehttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-tls-automated
Configure customer-managed TLS for Azure Monitor pipelinehttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-tls-custom
Configure Azure Monitor network and firewall accesshttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/azure-monitor-network-access
Securely deploy and configure Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-security
Configure Network Security Perimeter for Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/network-security-perimeter
Apply Network Security Perimeter scenarios to Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/network-security-perimeter-scenarios
Built-in Azure Policy definitions for Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/policy-reference
Secure Azure Monitor access with Private Link scopeshttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/private-link-security
Configure RBAC roles and permissions in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/roles-permissions-security
Configure RBAC roles and permissions in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/roles-permissions-security
Use Azure Policy compliance controls for Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/security-controls-policy
Use Azure Policy compliance controls for Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/security-controls-policy
Register Azure AD app and assign roles for Monitor APIshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/register-app-for-token
Configure customer-managed keys for Azure Monitor logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/customer-managed-keys
Design granular RBAC for Azure Monitor Log Analyticshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/granular-rbac-log-analytics
Configure row-level access with granular RBAC in Log Analyticshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/granular-rbac-use-case
Configure access control for Azure Log Analytics workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/manage-access
Configure table-level RBAC for Log Analytics workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/manage-table-access
Configure protected tables and RBAC in Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/protected-tables-configure
Configure access control for Azure Monitor workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-manage-access
Analyze Databricks RBAC audit logs in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksrbac
Audit Databricks remote history service credentialshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksremotehistoryservice
Monitor Databricks request-for-access eventshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksrfa
Track Databricks secrets access and changeshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickssecrets
Audit Databricks SQL endpoint lifecycle eventshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickssql
Review Databricks SQL permissions audit logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickssqlpermissions
Monitor Databricks SSH access audit eventshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksssh
Analyze Databricks Unity Catalog audit activityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksunitycatalog
Audit Databricks webhook notification activityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickswebhooknotifications
Monitor Databricks web terminal usage logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickswebterminal
Audit Databricks workspace configuration changeshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksworkspace
Track Databricks workspace file access and changeshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksworkspacefiles
Analyze Microsoft Dataverse and Dynamics 365 audit logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/dataverseactivity
Monitor Defender for IoT raw security eventshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/defenderiotrawevent
Use DeviceBehaviorEntities for threat investigationhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicebehaviorentities
Leverage DeviceBehaviorInfo for security behavior insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicebehaviorinfo
Collect custom file events with MDE for investigationshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomfileevents
Monitor custom DLL load events in MDEhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomimageloadevents
Track custom network activity with MDE logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomnetworkevents
Capture custom process events for endpoint securityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomprocessevents
Audit custom registry changes with MDEhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomregistryevents
Monitor custom script execution events in MDEhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomscriptevents
Inspect file signing certificates with DeviceFileCertificateInfohttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicefilecertificateinfo
Audit Azure API for FHIR with Monitor tableshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-healthcareapis-services
Monitor Azure Health Data DICOM service activityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-healthcareapis-workspaces
Audit Nexus bare metal machine security and metrics logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-networkcloud-baremetalmachines
Audit Purview security events with PurviewSecurityLogshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/purviewsecuritylogs
Use ResourceManagementPublicAccessLogs for private link analysishttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/resourcemanagementpublicaccesslogs
Audit Azure Synapse RBAC operations with logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/synapserbacoperations
Analyze STIX threat indicators in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/threatintelindicators
Use ThreatIntelligenceIndicator logs for security analysishttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/threatintelligenceindicator
Query generic STIX threat intel objectshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/threatintelobjects
Analyze Defender for Office 365 URL click eventshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/urlclickevents
Analyze user access paths to Azure resourceshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/useraccessanalytics
Run resource-scoped Prometheus queries securely in Grafanahttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/grafana-resource-scoped-queries
Call Azure Monitor-managed Grafana APIs with Entra IDhttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/visualize-call-grafana-api
Secure Azure Monitor workbooks with customer storagehttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-bring-your-own-storage
发现
标签

此技能尚未发布标签。

版本
最新版本元数据

版本

v2026.09.24

发布时间

Sep 24, 2026

分类

未分类

许可证

CC-BY-4.0

源路径

skills/azure-monitor

默认分支

main

最新提交

1e593dd

Tree SHA

a074c78