RedHat Linux - AMA agent Rsyslog issue
Hi All, We have the AMA agent installed on our host and confirmed that CEF events are being received. However, they are not being forwarded to port 28330 as expected. The firewall is disabled, SELinux is disabled, and the JSON configuration files for the…
Azure Monitor
Azure VM Disk IOPs report with Disk details
Hi, I'm trying to fetch the IOPs report of the Azure VMs disk with some additional information such as Disk assigned letter, Disk Name, Disk size, Disk size utilization, Read Iops, Write IOPs & etc.. I've the query created but the problem is the…
Azure Monitor

how to list child resource via the SDK
Given an Azure resource, e.g. a storage account: /subscriptions/.../resourceGroups/myresources/providers/Microsoft.Storage/storageAccounts/mystorageaccount Is there any way to programmatically determine that there are child resources under it, e.g. the…
Azure Monitor
Data received via AMA Connector is removing semicolons in SyslogMessage field for Syslog table
When onboarding Cisco ASA and Cisco FTD logs into Azure Sentinel using the Azure Monitor Agent (AMA), We've encountered an issue where Sentinel appears to be modifying the syslog messages before they are stored in the Syslog table. Specifically, we've…
Azure Monitor
Retirement Announcement – Technical Support for instrumentation key–based ingestion in Application Insights will end on 31 March 2025
On 31 March 2025, technical support for instrumentation key–based global ingestion in the Application Insights feature of Azure Monitor will end. Your Applications Insights resources will continue to receive data, but instrumentation key-based global…
Azure Monitor

Ensure your resources interacting with Azure Monitor are using TLS 1.2 or later before 1 July 2025
Hi team, I received an email "Ensure your resources interacting with Azure Monitor are using TLS 1.2 or later before 1 July 2025", and in the email, it tells me I can check the service retirement workbook to see the impacted resources, but in…
Azure Monitor
Alert Rules time ranges to match billing cycles (Azure Functions)
I am looking to set-up various alerts related to signals such as "Function Execution Count" and "Function Execution Units" such as described here. Crucially, I wish for their time ranges to match the monthly billing cycle, so that I…
Azure Monitor
Getting "Daily Quota Exceeded" with Azure Monitor OpenTelemetry Exporter and Node.JS
Hi all, I have some pods running Node.JS and the Azure Monitor OpenTelemetry Exporter in AKS, sending data to Application Insights via instrumentation key. Recently many log entries started to appear with "Daily Quota Exceeded", however the…
Azure Monitor
Why did my logs stop coming into my log analytics workspace?
I have several Windows 11 Pro laptop. Not virtual machines. My goal was to get Windows Security Logs and Windows Firewall logs from all of these laptops. I got them on Azure ARC, and then installed the AMA extension for each. After I created a DCE &…
Azure Monitor
How to make a custom header saved in standard availability test persist?
Under applications insights, adding standard availability test. When a custom header is included and saved under standard test info, it then disappears from test (even after saving). It does not persist and the test is not passing the header during the…
Azure Monitor
Azure Application Insight-Mulesoft Operation ID Missing
We are currently using Azure Application Insights to capture logs from MuleSoft, and we've noticed that the operation_Id is missing in the results table. We've tried passing various headers (using Postman to MuleSoft) referenced from Microsoft article…
Azure Monitor
No Logs Appearing in AZMSOperationalLogs Despite Enabled Diagnostic Settings for Service Bus
I'm not seeing any logs in the AZMSOperationalLogs table in Log Analytics, even though diagnostic settings are enabled for the Service Bus with all log categories selected. I can also confirm that there has been activity on the Service Bus topics and…
Azure Monitor
Azure activity connector no longer data receiving
The Azure activity connector is installed and configured, but no longer receives data. However, associated assignment policies are compliant. Please suggest a solution.
Azure Monitor

"Alert processing rule" to disable specific "Azure Monitor Alert Exception Anomalies" emails
Our Azure subscription is configured to send Azure Monitor Alert Exception Anomalies emails when there is an unusual rise in the rate of exceptions thrown by our app. We don't need to receive email notifications for particular errors, so I configured an…
Azure Monitor
The stream syslog was not configured in the dcr with immutable ID - AxoSyslog DCR Ingestion Error
Hello All! We currently have an issue whereby we are attempting to stream data from an on-premise AxoSyslog/Syslog-ng server through to an Azure DCR via. a data collection endpoint. We have configured our syslog-ng.conf file as follows: destination…
Azure Monitor
Azure Monitor agent not sending custom text logs for arm machines
Even though both the AMD and ARM Azure Virtual Machines are using the same Data Collection Rules (DCR) and Data Collection Endpoints (DCE), I’m seeing that the Azure Monitor Agent (AMA) is only sending custom text logs from the AMD machines. The ARM…
Azure Monitor
Azure Monitor Agent Troubleshooting Tool Reports Subcomponent Installation Errors
Hi Azure Support, I'm encountering an issue with the Azure Monitor Agent (AMA) on my Linux VM (ARM Architecture Machine). When I run the AMA troubleshooting tool using the commandsudo sh ama_troubleshooter.sh -A, it reports the following error: ERROR…
Azure Monitor
Ensure your resources interacting with Azure Monitor are using TLS 1.2 or later before 1 July 2025
I got an mail a following email - didn't find any impacts service even in service retirement workbooks "Ensure your resources interacting with Azure Monitor are using TLS 1.2 or later before 1 July 2025 You're receiving this notice because you're…
Azure Monitor
Application Insights availability tests not supporting TLS 1.3
We received a High impact advisory in Security Advisor that "TLS should be updated to the latest version for web apps". This was a simple change in our IAC that we started to roll out. Upon doing so we started getting all of our availability…
Azure Monitor

'authentication token provided does not have access to ingest data' when attempting to call a DCR from a logic app
{ "type": "Http", "inputs": { "uri":…
Azure Monitor
