Azure Monitor

Azure wide legacy TLS 1.0 retirement

In alignment with Azure’s platform-wide retirement of legacy TLS protocols, TLS 1.0 and TLS 1.1 will be fully blocked for Azure Monitor Logs ingestion and query endpoints by March 2026. To prevent potential service disruption, we want to ensure that all…

Log Search Alert V2 – Customizable Email Subject does not resolve dynamic columns from Single Event (Preview)

Hello, I am trying to use the Customizable Email Subjects for Log Search Alerts V2 feature as announced here:…

Azure Work book- query Item- Control settings tab

Hi Team, we have updated governance related microsoft workbook for cost, and i can see controll setting is available in the cost queryitems. when i am creating workbook from blank and create a query item, this control setting is not appeared in the query…

Fluent Bit vulnerability CVE‑2025‑12970

Fluent Bit vulnerability CVE‑2025‑12970 detected on several Azure Linux servers running the Azure Monitor Agent (AMA). is there a fix for this? Is there a remediation/patch currently available? If yes, is there an ETA?

Diagnostic Settings not functioning as expected, not all CL tables registering events

I wanted to tag this with Azure Log Analytics but couldn't find that tag. Here goes We have two spark pools that have the same Spark Version (3.4), same Spark Configuration (which is used to write events to three tables (SparkListenerEvent_CL,…

Upgrade to the new monitoring experience - no data

Hello, We have set up the 'new monitoring experience' for two arc enabled servers but even 16 hours later there is no data ingested. The setup is pretty straightforward, you click 'Configure', in the Capabilities, the 'Preview OpenTelemetry metrics'…

How to fix this issue, as the all servers meet all the required requirements for Azure monitoring.

Log analytics workspace archive restore data not working

Hi, I'm trying to access data older than 1 month from a Log Analytics Workspace where the total retention period is as follows: I've been following this guide from MS docs: https://learn.microsoft.com/en-us/azure/azure-monitor/logs/restore?tabs=api-1 …

Monitor storage account on remaining capacity or percentage used

I have a use case where I need to create alerts if the storage account is getting full. I wanted to know if there is a way to know how to find any of the following : The percentage use of a storage account (e.g. 80% of total storage capacity used) …

What does "\VmInsights\DetailedMetrics" actually collect ?

Hello, I have several Linux VMs that I'd like to monitor, I created a DCR and enabled the "\VmInsights\DetailedMetrics" performance counter, I triend to add the Swap counters but Azure wouldn't allow it. Adding another Data Source also doesn't…

Where is Azure is the primary key and workspace id for a Log Analytics workspaces?

I am trying to use c# API for Log Analytics. I need the Primary Key and Workspace ID in order to connect. Where do I find these in Azure?

Creating Custom DCR to exclude logging of certain EventID

Hi I am trying to create a DCR rule for Windows Security Events via AMA data connector to exclude certain Event IDs and services using a XPath query. I have tried the following queries but it does not work: Security!*[System[(EventID != 4624)]]…

What is 'Directly ingested signal' and how do I get rid of it?

Hi, We're working with Azure Monitor Health Model. For some entities in the model, all of a sudden I can see a signal called 'Directly ingested signal'. The problem with it is that once it's in degraded or unhealthy state, it never changes. I also don't…

Azure Monitor Health Model is broken when an entity is deleted

This has happened twice for me now in two different Health models. In some circumstances, when an entity is deleted in a Health model, the whole model breaks and it's not possible to use or recover it anymore. This is a critical bug since it's not…

azure monitor VMinsights say:Cannot enable - Unable to determine if OS is supported (Why?)

In two different customer environments, we have activate Azure Arc, installed the Agent on a Windows Server (2016 - 2025), installed the AMA-agent and the responsible DCR. Now we think about to monitor more detail the sevrer and want to enable VMsights.…

providing team to Azure AD logs in centralized law

Hello, I would need give access to one of our teams to Azure AD sing-in logs which are located in our centralized law. Azure AD logs are one of most important logs for many perspective so I would need come up with solution that could restrict access to…

How to delete managed log analytics workspace

How can I delete a managed Log Analytics workspace when access is denied due to a deny assignment on the managed account? Can I not delete Application Insights and just delete the managed workspace （I already relinked the app insights to another log…

VMs enabled are not shown

 const apiVersion = "2023-03-11";   const associationUrl =…

AKS node monitoring missing trend max view

Some of our clusters have these missing Trend Max view for the nodes. The ama-metrics-node-* agents are up and running each nodes, time range change doesn't help to bring the view. I have multiple clusters and some of them shows full view but some of…

Azure Monitor workbook help needed

How can I create a workbook under Azure Monitor which can get the usage of all Log analytics workspaces ? I created a new workbook and added a Subscription picker parameter with 'All' subscriptions selected by default. And then created a query to…