Access Issues After Changing "Query Access" Settings on Log Analytics Workspace
Hello, We have an active site-to-site VPN connection between our on-premises office network and our Azure infrastructure. Through this VPN, we can access all private resources, and for some endpoints, we use host file mappings such as: 10.0.1.4…
Azure Monitor
Unable to Delete a Log Analytics Workspace in Azure
While I am the Owner of the Subscription & Resource Group, I cannot delete a Log Analytics Workspace because there is a system assigned Deny Assignment on the Resource Group for All Principals. What do I need to do to delete this service and…
Azure Monitor
Azure Monitor Alert Rule for Service Bus Abandoned Messages
I am attempting to set up an alert rule for Azure Service Bus using the signal Abandoned Messages. The definition for abandoned messages suggests that the alert should trigger when a message is not received and the delivery count increases. However, I…
Azure Monitor
Azure VM Disk IOPs report with Disk details
Hi, I'm trying to fetch the IOPs report of the Azure VMs disk with some additional information such as Disk assigned letter, Disk Name, Disk size, Disk size utilization, Read Iops, Write IOPs & etc.. I've the query created but the problem is the…
Azure Monitor
Data received via AMA Connector is removing semicolons in SyslogMessage field for Syslog table
When onboarding Cisco ASA and Cisco FTD logs into Azure Sentinel using the Azure Monitor Agent (AMA), We've encountered an issue where Sentinel appears to be modifying the syslog messages before they are stored in the Syslog table. Specifically, we've…
Azure Monitor
Ensure your resources interacting with Azure Monitor are using TLS 1.2 or later before 1 July 2025
Hi team, I received an email "Ensure your resources interacting with Azure Monitor are using TLS 1.2 or later before 1 July 2025", and in the email, it tells me I can check the service retirement workbook to see the impacted resources, but in…
Azure Monitor
RedHat Linux - AMA agent Rsyslog issue
Hi All, We have the AMA agent installed on our host and confirmed that CEF events are being received. However, they are not being forwarded to port 28330 as expected. The firewall is disabled, SELinux is disabled, and the JSON configuration files for the…
Azure Monitor
how to list child resource via the SDK
Given an Azure resource, e.g. a storage account: /subscriptions/.../resourceGroups/myresources/providers/Microsoft.Storage/storageAccounts/mystorageaccount Is there any way to programmatically determine that there are child resources under it, e.g. the…
Azure Monitor
Retirement Announcement – Technical Support for instrumentation key–based ingestion in Application Insights will end on 31 March 2025
On 31 March 2025, technical support for instrumentation key–based global ingestion in the Application Insights feature of Azure Monitor will end. Your Applications Insights resources will continue to receive data, but instrumentation key-based global…
Azure Monitor

Alert Rules time ranges to match billing cycles (Azure Functions)
I am looking to set-up various alerts related to signals such as "Function Execution Count" and "Function Execution Units" such as described here. Crucially, I wish for their time ranges to match the monthly billing cycle, so that I…
Azure Monitor
Getting "Daily Quota Exceeded" with Azure Monitor OpenTelemetry Exporter and Node.JS
Hi all, I have some pods running Node.JS and the Azure Monitor OpenTelemetry Exporter in AKS, sending data to Application Insights via instrumentation key. Recently many log entries started to appear with "Daily Quota Exceeded", however the…
Azure Monitor
Why did my logs stop coming into my log analytics workspace?
I have several Windows 11 Pro laptop. Not virtual machines. My goal was to get Windows Security Logs and Windows Firewall logs from all of these laptops. I got them on Azure ARC, and then installed the AMA extension for each. After I created a DCE &…
Azure Monitor
How to make a custom header saved in standard availability test persist?
Under applications insights, adding standard availability test. When a custom header is included and saved under standard test info, it then disappears from test (even after saving). It does not persist and the test is not passing the header during the…
Azure Monitor
Azure Application Insight-Mulesoft Operation ID Missing
We are currently using Azure Application Insights to capture logs from MuleSoft, and we've noticed that the operation_Id is missing in the results table. We've tried passing various headers (using Postman to MuleSoft) referenced from Microsoft article…
Azure Monitor
No Logs Appearing in AZMSOperationalLogs Despite Enabled Diagnostic Settings for Service Bus
I'm not seeing any logs in the AZMSOperationalLogs table in Log Analytics, even though diagnostic settings are enabled for the Service Bus with all log categories selected. I can also confirm that there has been activity on the Service Bus topics and…
Azure Monitor
Azure activity connector no longer data receiving
The Azure activity connector is installed and configured, but no longer receives data. However, associated assignment policies are compliant. Please suggest a solution.
Azure Monitor

"Alert processing rule" to disable specific "Azure Monitor Alert Exception Anomalies" emails
Our Azure subscription is configured to send Azure Monitor Alert Exception Anomalies emails when there is an unusual rise in the rate of exceptions thrown by our app. We don't need to receive email notifications for particular errors, so I configured an…
Azure Monitor
The stream syslog was not configured in the dcr with immutable ID - AxoSyslog DCR Ingestion Error
Hello All! We currently have an issue whereby we are attempting to stream data from an on-premise AxoSyslog/Syslog-ng server through to an Azure DCR via. a data collection endpoint. We have configured our syslog-ng.conf file as follows: destination…
Azure Monitor
Azure Monitor agent not sending custom text logs for arm machines
Even though both the AMD and ARM Azure Virtual Machines are using the same Data Collection Rules (DCR) and Data Collection Endpoints (DCE), I’m seeing that the Azure Monitor Agent (AMA) is only sending custom text logs from the AMD machines. The ARM…
Azure Monitor
Azure Monitor Agent Troubleshooting Tool Reports Subcomponent Installation Errors
Hi Azure Support, I'm encountering an issue with the Azure Monitor Agent (AMA) on my Linux VM (ARM Architecture Machine). When I run the AMA troubleshooting tool using the commandsudo sh ama_troubleshooter.sh -A, it reports the following error: ERROR…