Need more details regarding Microsoft Azure Alert Signal named "All Administrative Operations"
While I am going through the below page which explains how to create an alert with Signal named "All Administrative Operations". I am interested in what specific operations the signal "All Administrative Operations" includes. Is the…
Type of log to identify failed Windows Defender update?
Hi everyone, I am trying to set up Log Analytic Workspace that will capture any critical and security updates in the Windows VMs which I believe will also include the failed Windows Defender update logs. Now I would like to have an action taken whenever…
Time range (for last month) in Kusto Query language in Logs Analytics Workspace
Hi, We use Log Analytics Workspace to collect logs for our customer tenants under a resource hosted in Azure. Previously we would select Time Range feature to select the hits per tenant for the last calendar month and I was looking to set it in the…
Windows Update for Business reports configuration action failed?
I'm trying to set up Windows Update for Business reports and have hit a wall that I can't figure out what the issue is. I'm logged in as the global administrator but I keep receiving the following error. Checking the Azure subscription shows the status…
Azure Monitor Log Ingestion API - Error when POSTing to Syslog table
Hi, I'm trying to use the Log Ingestion API to POST data to the Syslog table in Log Analytics but I am unable to get it working. The documentation suggests this should be possible:…
Unable to display insight metrics for Azure Virtual Windows Server
Unable to display insight metrics for Azure Virtual Windows Server
Service principal logs are not coming in activity logs.
I've registered my service principal into other organization azure tenants. my service principal did some activity but not able to see that logs in their tenant activity logs. need help.
Trigger notification and action when VM goes down
Trigger notification and action (ansible play book or standalone python script) when VM goes down. Our requirement is need to trigger an alert and action once vm shut down. I tried vm-poweroff-alert but I am not getting any alerts (email configured) when…
Monitoring CDN Performance in Azure
"Hello Team, We have recently implemented the CDN, and I would like to understand if there are any ways to monitor its performance effectively. Are there any existing dashboards or monitoring tools available in Azure that we can use to track key…
Unable to perform - Exercise: Different types of KQL queries
Hello Support, Recently I have enrolled myself for the Analyze monitoring data with Kusto Query Language Learning Path, where on the first module I have been experiencing an issue with openin the query getting error: Selected user account does not…
Azure Monitor Agent for Linux is bloatware
Hello Azure community, For the past 2-3 weeks I have been getting CPU and memory alerts for VMs which have been stable for years. Looking into the problem, it was always Azure Monitor Agent or one the Azure extensions causing the spike in load. It's…
"Sev3 Azure Monitor Alert VM Availability" after this alert my code and phpmyadmin database not recover how recover this
After receiving a Sev3 (Severity 3) Azure Monitor Alert related to VM Availability, my virtual machine (VM) experienced data loss. How can I investigate the cause of this issue, recover the lost data, and prevent such incidents in the future?
About saving Azure Workbook on a Storage Account
Hi I recently posted this question https://learn.microsoft.com/en-us/answers/questions/2154540/about-reading-some-azure-workbooks I realized that I could not save the workbook on a Storage Account due to permissions. What are the permissions…
AzureActivity Table PrincipalId + UserPrincipalName from another Table in KQL
Good morning all I am following Microsoft's official documentation for adding an alert rule that fires when a user adds another user or service principal to a privileged role assignment (e.g. Owner, Contributor). I have achieved this by streaming logs to…
Azure DCR Rules
If we write a DCR to ingest VMInsights Metrics into Log Analytics workspace as shown below: "dataSources": { "performanceCounters": [ { "streams":…
Granting access to Azure application service log stream
Hi All. I granted a user monitoring reader role but found out that they are still unable to access the application service log stream. Can someone confirm what permissions are required for access to the application service log stream.
How to View Azure Fileshare Used Capacity in Logs and Display in a Dashboard?
Hi, I want to see the used capacity in Azure Fileshare and display the results in a dashboard. However, it is not working as expected. I am only getting these outputs: Yet, I can see the used capacity under Insights:

How to get Free Trial for Azure DevOps Pipeline
Hi, I need to learn and use Azure DevOps pipelines, but in order to do so, I need to attach a subscription to my Azure DevOps organization. However, I believe it's not possible to attach a free Azure trial account, as it generates an error. Previously,…
Consolidate azure container apps alert query to setup alert on all container apps
Hi, We would like to write alert queries for all container apps in a single place which will conver all the container apps with the name (regex or wildcard pattern). We dont want to create alert rules for common resources like cpu, memory and disk…

Data not being refreshed in the Log Analytics demo
I'm currently working through the KQL learning path. The logs in the Log Analytics Demo environment don't seem to be refreshing. This is supposed to be a training ground for KQL but for example there is no data in the SecurityEvent table for several…