Forum Discussion
Application Pool monitoring in Log Analytics
Have you considered also looking at the Perf counters and the EventLog?
https://blogs.iis.net/mailant/new-worker-process-performance-counters-in-iis7
The EventLog does have details (assuming the App Pool is sending the logs to the "System" Event Log)
Event | where EventLog == "System" and Source == "Microsoft-Windows-WAS" | parse ParameterXml with * "</Param><Param>" AppPoolName "</Param><Param>" * | summarize by AppPoolName, EventID, RenderedDescription, Computer //| summarize by AppPoolName, EventIDI don't have many EventIDs in my subscription (2 App pools which don't do much), but these should be easy to spot in your environment.
I have some SLA sample queries (these merge Heartbeat + Perf entries) but you can change it to EventLog and Perf here
IS the anyway to query IIS Logs and currently what I observe is we are fetching data based on the EventLog and querying System Logs , but here we are only able to fetch the status Shutdown and not all status of App Pool , since if at all we need identify the health or status of the AppPool before shutdown it can only be useful and based on that we can generate the alert and take the corrective action.
Also I was wondering if we make use of Application Insights to achieve this and how does the Azure Log Analytics is different from these .
Please let me know your thoughts in regards to the same and is there any ways to query the IIS logs.
SamsonJohn I'm also looking for the same.
If anyone idea about how to get the state of IIS app pools which are available through log analytics work space in order to configure alert rule or else suggest how to user azure runbooks in action groups while configuring alert rule
