Azure Monitor Flashcards
What types of data do we collect with Azure monitor?
- Audit logs
- Service health
- Metrics
- Duagnostic extensions
- App insights
What are the two main data types collected by Azure Monitor?
- Metrics
- Logs
How often is the Metric data collected?
Every one min
How long is Metric data stored for?
93 days
When we view metrics in Azure Monitor what are we using?
Metric explorer
What are the types of diagnostic logs we can have?
- Tennant logs: Logs outside subscription, like AD
- Resource logs: Logs emitted by the resources
- OS: Logs from the VM OS
What options do we have to send diagnostic logs to other services?
You cna send Azure Logs to,
- Storage account
- Log Analytics
- Event hub
I have a VM and i want to get diagnostic information form it, how can I configure this?
Diagnostic info is not availablke direct in the portal,
What are activity logs?
Detail information on PUT, POST, DELETE operations in Azure, but not GET operations on respirces in Azure
What are the sources for activity logs?
- Administratoive: Create , update., delete actions through Resource Manager
- Sservice Health: Incident related to Azure Services
- Resource Health: Events related to resource health
- Alert: A record of any azure alert
- Security: Alerts generated in security center
- Policy: Reserved
I need to take an action in response to a performance metric in Azure Monitor, how can I do this?
Use Azure Monitor Alerts.
How can I get notified when CPU % is over 80%?
Use Azure Monitor Alerts and set up a alert with a action group and use notifications to send alerts.
When using Azure Monitor Alerts what are the action you can take?
- Azure Functions
- ITSM
- Automation Runbook
- Logic apps
- Webhook
- Push
- SMS
Is there rate limiting on SMS, Voice and Email?
Yes,
- 1 SMS every 5 min
- Voice: 1 voice call every 5 min
- Email: 100 per hour
When an el;ert is generated, is there other things I can do with the alert?
Yes,
- Look at th hiostory
- Change it state to say agknowelledge
What do I need to be able to use Log analytics?
You need a workspece, this is a type of storage for the log data.
What dose log analytics give you?
It give you the ability to receive log information for many sources and run queries over the data.
In what region is log analytics workspce stored?
The WS is stored in the region you define, this is where the data is also stored.
What reasons would i have to have multipal work spaces used in an subscription?
- Data in the WS is stored in a region, you would have to pay to have this data shipped across Azure regions, paying for data out.
- You many have data soverennty issues, requiring data to stay ina region.
- Seperation by department, security, gov reasons.
When I create a workspace, what do I next need ot eadd to get my data flowing?
You have to configure the data soulces,
- VM
- Storage accounts
- Activity logs
- Azure resources
- Scoped config
What are the available destination for Diagnostic settings?
Log analytics workspace
Storage
Event hub
Can I have multiple diagnostic settings?
Yes 100%, you can decide to send to different destinations and you may decide on different data to send.
I need to understand who turned off VM at 1pm today, how can I look at these type of audit logs?
You can use the activity logs, activity logs capture the resource manger API activity.
What is Activity Logs recording?
It is recording the PUT, POST, Delete REST API (Write actions)requests.