{"id":160,"date":"2026-04-03T22:37:27","date_gmt":"2026-04-04T01:37:27","guid":{"rendered":"https:\/\/proglab.com.br\/?page_id=160"},"modified":"2026-04-10T15:59:59","modified_gmt":"2026-04-10T18:59:59","slug":"recommend-a-logging-and-monitoring-solution-and-routing-logs-solution","status":"publish","type":"page","link":"https:\/\/proglab.com.br\/?page_id=160","title":{"rendered":"Recommend a logging and monitoring solution and routing logs solution"},"content":{"rendered":"\n<p>This content covers the following Sub Domains:<\/p>\n\n\n\n<p><strong>Recommend a logging solution<\/strong><\/p>\n\n\n\n<p><strong>Recommend a solution for routing logs<\/strong><\/p>\n\n\n\n<p><strong>Recommend a monitoring solution<\/strong><\/p>\n\n\n\n<p><strong>Metrics<\/strong>, <strong>logs<\/strong>, and distributed <strong>traces <\/strong>are commonly referred to as the three pillars of <strong>observability<\/strong>. Observability can be achieved by <strong>correlating <\/strong>data from <strong>multiple pillars<\/strong> and <strong>aggregating data <\/strong>across the entire set of resources being monitored.<\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/training\/modules\/design-solution-to-log-monitor-azure-resources\/2-design-for-azure-monitor-data-sources\"><strong>Design for Azure Monitor data sources &#8211; Training | Microsoft Learn<\/strong><\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/fundamentals\/overview\"><strong>Azure Monitor overview &#8211; Azure Monitor | Microsoft Learn<\/strong><\/a><\/p>\n\n\n\n<p><strong><a href=\"http:\/\/Azure Monitor overview - Azure Monitor | Microsoft Learn\">Azure Monitor<\/a> <\/strong>is a common monitoring data platform that includes metrics, logs, traces, and changes, and it monitors various data sources. The platform offers many features that support two primary components:&nbsp; <strong>Logs<\/strong>&nbsp;and&nbsp;<strong>Metrics<\/strong>.<\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/logs\/data-platform-logs\"><strong>Azure Monitor Logs<\/strong><\/a>&nbsp;lets you <strong>collect <\/strong>and <strong>organize <\/strong>data from resources that you monitor. You configure what data is gathered and organized on the platform. Other features in Azure Monitor automatically store their data in Logs. You can use the stored data with your collected data to help monitor the performance of your environment.<br><br>You can collect logs, manage log data and costs, and consume different types of data in one&nbsp;<a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/logs\/data-platform-logs#log-analytics-workspace\"><strong>Log Analytics workspace<\/strong><\/a>, the primary Azure Monitor Logs resource.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"766\" height=\"485\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-11.png\" alt=\"\" class=\"wp-image-379\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-11.png 766w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-11-300x190.png 300w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>Workflow:<\/p>\n\n\n\n<p>1. <strong>Collect <\/strong>any data&nbsp;by using Azure Monitor data collection methods.<br>2. <strong>Manage <\/strong>and optimize log data and costs&nbsp;by configuring your Log Analytics workspace and log tables<br>3. <strong>Retrieve <\/strong>data in near-real time<strong>&nbsp;<\/strong>by using Kusto Query language (KQL)<br>4. <strong>Use <\/strong>data flexibly<strong>&nbsp;<\/strong>for a range of use cases, including data analysis, troubleshooting, alerting, dashboards and reports, custom applications, and other Azure or non-Azure services<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"620\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-3-1024x620.png\" alt=\"\" class=\"wp-image-363\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-3-1024x620.png 1024w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-3-300x182.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-3-768x465.png 768w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-3-1536x929.png 1536w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-3.png 1869w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>Data Collection:<\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/data-sources\">Azure Monitor data sources and data collection methods<\/a><br><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/essentials\/data-collection-transformations\">Data collection transformations in Azure Monitor<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"469\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-4-1024x469.png\" alt=\"\" class=\"wp-image-365\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-4-1024x469.png 1024w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-4-300x137.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-4-768x352.png 768w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-4-1536x704.png 1536w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-4-2048x939.png 2048w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p><strong><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/metrics\/data-platform-metrics\">Azure Monitor Metrics<\/a><\/strong> is a feature of Azure Monitor that collects <strong>numeric <\/strong>data from monitored resources into a <strong>time-series database<\/strong>. Metrics are numerical values that are collected at regular intervals and <strong>describe some aspect of a system at a particular time<\/strong>.<\/p>\n\n\n\n<p>Types of metrics and destinations:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Native &#8211; Can be <strong>Platform <\/strong>or <strong>Custom<\/strong>. \n<ul class=\"wp-block-list\">\n<li><strong>Platform<\/strong> don&#8217;t need configuration and don&#8217;t have cost, collected automatically from Azure Resources<\/li>\n\n\n\n<li><strong>Custom <\/strong>needs configuration &#8211; like Applications and Agents running in VMs <\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Prometheus <\/strong>&#8211; from Kubernetes Clusters, including AKS. Sent to PromQL, Grafana, etc&#8230;<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"418\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-2-1024x418.png\" alt=\"\" class=\"wp-image-360\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-2-1024x418.png 1024w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-2-300x122.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-2-768x313.png 768w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-2-1536x627.png 1536w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-2.png 1627w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>Platform and custom metrics are stored for&nbsp;<strong>93 days<\/strong>&nbsp;with the following exceptions:<br>&#8211; <strong>Classic guest OS metrics<\/strong>: at least 14 days, although no expiration date is defined<br><strong>&#8211; Guest OS metrics collected by the Log Analytics agent<\/strong>:&nbsp;31 days and can be extended up to 2 years<br><strong>&#8211; Application Insights log-based metrics<\/strong>:31 days to 2 years<br><br><strong>Moving or renaming <\/strong>an Azure Resource may result in a <strong>loss of metric history<\/strong> for that resource.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"810\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-1-1024x810.png\" alt=\"\" class=\"wp-image-359\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-1-1024x810.png 1024w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-1-300x237.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-1-768x608.png 768w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-1-1536x1215.png 1536w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-1.png 1969w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>Wider view:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1005\" height=\"542\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/azure-monitor-diagram.png\" alt=\"\" class=\"wp-image-324\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/azure-monitor-diagram.png 1005w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/azure-monitor-diagram-300x162.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/azure-monitor-diagram-768x414.png 768w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>Understand how it pulls together data from all over: <\/p>\n\n\n\n<p><strong>Apps<br>Guest Operating Systems<br>Azure resources<br>Subscriptions<br>Entra ID<\/strong><\/p>\n\n\n\n<p>Identify data sources and access method<br>Azure Monitor collects data <strong>automatically <\/strong>from a range of components:<\/p>\n\n\n\n<p>\u00b7 Data tiers go from Azure applications (highest tier) to Azure platform components<br>(lowest tier)<br>\u00b7 The method of accessing data from each tier varies &#8211; for example, installing an agent<br>\u00b7 Each data tier can stream to different external systems<br>\u00b7 Prioritize and be deliberate on what data sources you need<br>\u00b7 Windows events<br>\u00b7 Linux syslog<br>\u00b7 Client performance data<br>\u00b7 Processes and dependencies (VM Insights)<br>\u00b7 Application text logs<br>. IIS logs<br>\u00b7 SNMP traps<br>\u00b7 Management pack data (SCOM)<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"459\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/Captura-de-tela-2026-04-05-153828-1024x459.png\" alt=\"\" class=\"wp-image-352\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/Captura-de-tela-2026-04-05-153828-1024x459.png 1024w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/Captura-de-tela-2026-04-05-153828-300x135.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/Captura-de-tela-2026-04-05-153828-768x345.png 768w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/Captura-de-tela-2026-04-05-153828-1536x689.png 1536w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/Captura-de-tela-2026-04-05-153828.png 1723w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>Know how it collects metrics and logs, stores them in places like log analytics, and then uses <strong>Diagnostic Settings<\/strong> to route that data to different destinations like <strong>event hubs<\/strong> or <strong>workspaces, archives to Storage Accounts <\/strong>for longer term storage or sends to <strong>a partner solution, <\/strong>like Splunk<strong>.<\/strong><\/p>\n\n\n\n<p>You can set up to <strong>five <\/strong>of these <strong>per resource<\/strong> so be ready to configure and explain them.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"902\" height=\"642\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/azure-monitor-diagsettingsample.png\" alt=\"\" class=\"wp-image-323\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/azure-monitor-diagsettingsample.png 902w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/azure-monitor-diagsettingsample-300x214.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/azure-monitor-diagsettingsample-768x547.png 768w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>This is a core monitoring and logging skill set that you&#8217;ll need to know for the exam.<\/p>\n\n\n\n<p>Verify:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Log sources<\/li>\n\n\n\n<li>Log levels<\/li>\n<\/ul>\n\n\n\n<p>Analyze log treatment: <\/p>\n\n\n\n<p>Where the logs need to be directed after they are generated and<strong> how to direct <\/strong>them to where they need to be.<\/p>\n\n\n\n<p>There are <strong>different possible destinations <\/strong>for each kind of log.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/learn.microsoft.com\/en-us\/training\/modules\/design-solution-to-log-monitor-azure-resources\/3-design-for-log-analytics\">Design for Azure Monitor Logs (Log Analytics) workspaces.<\/a><\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size\"><strong>What is Log Analytics?<br><\/strong>Log Analytics is a service in that helps you collect and analyze data.<\/p>\n\n\n\n<p>\u00b7 Azure Monitor stores log data in the workspace<br>\u00b7 Data in a <strong>workspace<\/strong> is organized into <strong>tables <\/strong>with properties you can <strong>query<\/strong><br><br>A Log Analytics workspace provides:<br>\u00b7 A <strong>geographic location<\/strong> for data storage.<br>\u00b7 Data isolation by granting <strong>different users access rights <\/strong>following one of our recommended design strategies.<br>\u00b7 <strong>Scope for configuration<\/strong> of settings like <strong>pricing <\/strong>tier, <strong>retention<\/strong>, and data <strong>capping<\/strong>.<\/p>\n\n\n\n<p class=\"has-medium-font-size\">Below are the destination of different types of logs for the internal Log Analytics tables:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"540\" height=\"455\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/Captura-de-tela-2026-04-05-160351.png\" alt=\"\" class=\"wp-image-355\" style=\"width:674px;height:auto\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/Captura-de-tela-2026-04-05-160351.png 540w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/Captura-de-tela-2026-04-05-160351-300x253.png 300w\" sizes=\"auto, (max-width: 540px) 100vw, 540px\" \/><\/figure>\n\n\n\n<p>We can run queries in these tables and get results using<strong> KQL<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size\"><strong>Considerations for workspace access control<\/strong><\/p>\n\n\n\n<p>Access can be <strong>Centralized<\/strong>, <strong>Decentralized <\/strong>or <strong>Hybrid<\/strong>:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"797\" height=\"793\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image.png\" alt=\"\" class=\"wp-image-357\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image.png 797w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-300x298.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-150x150.png 150w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-768x764.png 768w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-100x100.png 100w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p><strong>Centralized<\/strong>: All logs are stored in a central workspace and administered by a single team, with Azure Monitor providing differentiated access per-team.<\/p>\n\n\n\n<p><strong>Decentralized<\/strong>: Each team has their own workspace created in a resource group they own and manage, and log data is segregated per resource.<\/p>\n\n\n\n<p><strong>Hybrid<\/strong>: Security audit compliance requirements further complicate this scenario because many organizations implement both deployment models in parallel.<\/p>\n\n\n\n<p>Considerations: <br><strong>Centralized <\/strong>can bring <strong>latency<\/strong>, but is <strong>easier to maintain<\/strong> securely<br><strong>Decentralized <\/strong>harder to manage, but can be <strong>more flexible<\/strong><br><strong>Hybrid <\/strong>is the most popular: centralize common logs, like security and auditing, and decentralize for application specific logs for each app team <\/p>\n\n\n\n<p><strong>Considerations for access mode<br><\/strong>The access mode is how a user accesses the workspace and what data they can access.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Issue<\/strong><\/td><td><strong>Workspace-context<\/strong><\/td><td><strong>Resource-context<\/strong><\/td><\/tr><tr><td>How does the access mode work?<\/td><td>\n          . You can view all logs in the workspace you have permission to.<br>\n          . Queries in this mode are scoped to all data in all tables in the workspace.<br>\n          . This is the access mode used when logs are accessed with the workspace as the scope.\n        <\/td><td>\n          . When you access the workspace for a particular resource, resource group, or subscription.<br>\n          . You can view logs for only resources in all tables that you have access to.<br>\n          . Queries in this mode are scoped to only data associated with that resource.\n        <\/td><\/tr><tr><td>Who is each model intended for?<\/td><td>Central administration<\/td><td>Application teams<\/td><\/tr><tr><td>What does a user require to view logs?<\/td><td>Permissions to the workspace<\/td><td>Read access to the resource<\/td><\/tr><tr><td>What is the scope of permissions?<\/td><td>Workspace<\/td><td>Azure resource<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"629\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-5-1024x629.png\" alt=\"\" class=\"wp-image-368\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-5-1024x629.png 1024w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-5-300x184.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-5-768x472.png 768w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-5-1536x944.png 1536w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-5-2048x1259.png 2048w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>Workspaces are hosted on physical clusters. By default, the system creates and manages these clusters. If your system ingests more than <strong>500 GB of data per day<\/strong>, you<strong> create your own dedicated clusters<\/strong> for your workspaces to support greater control and higher ingestion rate.<\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/training\/modules\/design-solution-to-log-monitor-azure-resources\/4-design-for-azure-workbooks-insights\"><strong>Design for Azure Workbooks and Azure Insights.<\/strong><\/a><\/p>\n\n\n\n<p>Workbooks provide a flexible canvas for data analysis and the creation of rich visual reports within the Azure portal, combine data from disparate sources within a single report<br><br>Tap into multiple data sources and combine them into unified interactive experiences<\/p>\n\n\n\n<p>Provide insights into the availability, performance, usage, and health of resources<\/p>\n\n\n\n<p>Enable rich data and insights through composite views and joins<br><br>Workbooks are currently compatible with the following data sources:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#logs-analytics-tables-application-insights\">Logs (Analytics Tables, Application Insights)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#logs-basic-and-auxiliary-tables\">Logs (Basic, Auxiliary Tables)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#metrics\">Metrics<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#azure-resource-graph\">Azure Resource Graph<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#azure-resource-manager\">Azure Resource Manager<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#azure-data-explorer\">Azure Data Explorer<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#json\">JSON<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#merge\">Merge<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#custom-endpoint\">Custom endpoint<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#workload-health\">Workload health<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#azure-resource-health\">Azure resource health<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#azure-rbac\">Azure RBAC<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#change-analysis-classic\">Change Analysis (classic)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/azure-monitor\/visualize\/workbooks-data-sources#prometheus\">Prometheus<\/a><\/li>\n<\/ul>\n\n\n\n<p><strong>Design for Azure Insights<\/strong><\/p>\n\n\n\n<p>It&#8217;s critical to monitor your systems closely to identify any performance problems or attacks before they can affect users. Designing insights as a part of your overall architecture will help identify performance issues.<\/p>\n\n\n\n<p><strong>Use Application Insights to:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Analyze and address issues and problems that affect your application&#8217;s health and performance.<\/li>\n\n\n\n<li>Improve your application&#8217;s development lifecycle.<\/li>\n\n\n\n<li>Measure your user experience and analyze users&#8217; behavior.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"933\" height=\"543\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-6.png\" alt=\"\" class=\"wp-image-371\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-6.png 933w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-6-300x175.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-6-768x447.png 768w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p><strong>Use Azure Monitor VM insights to<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>View the health and performance of your VMs.<\/li>\n\n\n\n<li>Monitor your VMs at-scale across multiple subscriptions and resource groups.<\/li>\n\n\n\n<li>Want a topology view that shows the processes, and network connection details of your VMs and scale sets.<\/li>\n<\/ul>\n\n\n\n<p><strong>Use Azure Monitor Container Insights to:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>View the health and performance of your Kubernetes workloads at-scale across multiple subscriptions and resource groups.<\/li>\n\n\n\n<li>Want visibility into memory and processor performance metrics from controllers, nodes, and containers.<\/li>\n\n\n\n<li>Want view and store container logs for real time and historical analysis.<\/li>\n<\/ul>\n\n\n\n<p><strong>Types of Insights X Uses<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><a href=\"\/en-us\/azure\/azure-monitor\/app\/app-insights-overview\" data-linktype=\"absolute-path\">Application Insights<\/a><\/td><td>Monitor your live web application on any platform by using this extensible Application Performance Management (APM) service that&#8217;s available in Azure Monitor.<\/td><\/tr><tr><td><a href=\"\/en-us\/azure\/azure-monitor\/containers\/container-insights-overview\" data-linktype=\"absolute-path\">Container insights<\/a><\/td><td>Check the performance of container workloads deployed to either Azure Container Instances or managed Kubernetes clusters hosted on Azure Kubernetes Service (AKS).<\/td><\/tr><tr><td><a href=\"\/en-us\/azure\/azure-monitor\/insights\/network-insights-overview\" data-linktype=\"absolute-path\">Networks insights<\/a><\/td><td>Obtain comprehensive information on the health and metrics for all your network resources. Use the advanced search capability to identify resource dependencies. Searching by your website name to locate resources that host your website.<\/td><\/tr><tr><td><a href=\"\/en-us\/azure\/azure-monitor\/insights\/resource-group-insights\" data-linktype=\"absolute-path\">Resource group insights<\/a><\/td><td>Triage and diagnose any problems your individual resources encounter, while offering context as to the health and performance of the resource group as a whole.<\/td><\/tr><tr><td><a href=\"\/en-us\/azure\/azure-monitor\/vm\/vminsights-overview\" data-linktype=\"absolute-path\">Virtual machine insights<\/a><\/td><td>Monitor your Azure Virtual Machines, Virtual Machine Scale Sets, and other virtual machines. Analyze the performance and health of your Windows and Linux Virtual Machines, and monitor their processes and dependencies on other resources and external processes.<\/td><\/tr><tr><td><a href=\"\/en-us\/azure\/azure-monitor\/insights\/redis-cache-insights-overview\" data-linktype=\"absolute-path\">Azure Cache for Redis insights<\/a><\/td><td>Review a unified, interactive report of overall performance, failures, capacity, and operational health.<\/td><\/tr><tr><td><a href=\"\/en-us\/azure\/azure-monitor\/insights\/cosmosdb-insights-overview\" data-linktype=\"absolute-path\">Azure Cosmos DB insights<\/a><\/td><td>Get information on the overall performance, failures, capacity, and operational health of all your Azure Cosmos DB resources in a unified interactive experience.<\/td><\/tr><tr><td><a href=\"\/en-us\/azure\/azure-monitor\/insights\/key-vault-insights-overview\" data-linktype=\"absolute-path\">Azure Key Vault insights<\/a><\/td><td>Monitor your key vaults by using a unified report of your Key Vault requests, performance, failures, and latency.<\/td><\/tr><tr><td><a href=\"\/en-us\/azure\/storage\/common\/storage-insights-overview?toc=\/azure\/azure-monitor\/toc.json\" data-linktype=\"absolute-path\">Azure Storage insights<\/a><\/td><td>Do comprehensive monitoring of your Storage accounts via a unified report of your Storage performance, capacity, and availability.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p><strong><a href=\"https:\/\/learn.microsoft.com\/en-us\/training\/modules\/design-solution-to-log-monitor-azure-resources\/5-design-for-azure-data-explorer\">Design for Azure Data Explorer<\/a>.<\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/data-explorer\/data-explorer-overview\"><strong>Azure Data Explorer<\/strong><\/a>&nbsp;is a platform for big data that helps you analyze high volumes of data in near real time. Azure Data Explorer comes equipped with features to help you configure an end-to-end solution for ingesting and managing your data, running queries, and generating visualizations.<\/p>\n\n\n\n<p>Fast and <strong>highly scalable<\/strong> data exploration<br>Handle <strong>multiple data streams<\/strong>, so you can collect, store, and analyze your data from all resources<br>Analyze<strong> large volumes of diverse data<\/strong> from any data source<br><strong>Diagnostics<\/strong>, <strong>monitoring<\/strong>, <strong>reporting<\/strong>, <strong>machine learning<\/strong>, and other analytics tasks<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"610\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-9-1024x610.png\" alt=\"\" class=\"wp-image-374\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-9-1024x610.png 1024w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-9-300x179.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-9-768x457.png 768w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-9-1536x915.png 1536w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-9.png 1562w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>SIEM &#8211; Security Information &amp; Event Management &#8211; Informational only<br>SOAR Security Orchestration, Automation &amp; Response &#8211; Takes automated action <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"741\" src=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-10-1024x741.png\" alt=\"\" class=\"wp-image-377\" srcset=\"https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-10-1024x741.png 1024w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-10-300x217.png 300w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-10-768x556.png 768w, https:\/\/proglab.com.br\/wp-content\/uploads\/2026\/04\/image-10.png 1083w\" sizes=\"auto, (max-width: 706px) 89vw, (max-width: 767px) 82vw, 740px\" \/><\/figure>\n\n\n\n<p>Additional Links:<br><a href=\"https:\/\/www.youtube.com\/watch?v=nEn-MWFrWB0\">Design a solution to log and monitor Azure resources &#8211; AZ-305<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/design-solution-to-log-monitor-azure-resources\/5-design-for-azure-data-explorer\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/design-solution-to-log-monitor-azure-resources\/5-design-for-azure-data-explorer<\/a><br><br><a href=\"https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/configure-web-app-settings\/5-enable-diagnostic-logging\">https:\/\/docs.microsoft.com\/en-us\/learn\/modules\/configure-web-app-settings\/5-enable-diagnostic-logging<\/a><br><\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This content covers the following Sub Domains: Recommend a logging solution Recommend a solution for routing logs Recommend a monitoring solution Metrics, logs, and distributed traces are commonly referred to as the three pillars of observability. Observability can be achieved by correlating data from multiple pillars and aggregating data across the entire set of resources &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/proglab.com.br\/?page_id=160\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Recommend a logging and monitoring solution and routing logs solution&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":144,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-160","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages\/160","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/proglab.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=160"}],"version-history":[{"count":26,"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages\/160\/revisions"}],"predecessor-version":[{"id":474,"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages\/160\/revisions\/474"}],"up":[{"embeddable":true,"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages\/144"}],"wp:attachment":[{"href":"https:\/\/proglab.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=160"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}