Azure monitoring

%3CLINGO-SUB%20id%3D%22lingo-sub-286402%22%20slang%3D%22en-US%22%3EAzure%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286402%22%20slang%3D%22en-US%22%3E%3CP%3EHello!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFirst%20and%20foremost%2C%20I'm%20new%20to%20Azure%20and%20Azure%20monitoring.%20That's%20why%20I'm%20starting%20this%20conversation.%3C%2FP%3E%3CP%3EI'm%20currently%20trying%20to%20migrate%20our%20SolarWinds%20monitor%20into%20the%20Azure%20monitoring%20portal%2C%20but%20I'm%20unable%20to%20carry%20on%20because%20my%20knowledge%20about%20queries%20is%20absolutely%20minimum.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20like%20some%20assistance%20when%20it%20comes%20to%20queries%2C%20does%20anybody%20for%20instance%20know%20a%20query%20to%20monitor%20the%20CPU%20load%20on%20different%20computers%20and%2For%20servers%3F%20And%20which%20tile%20in%20the%20designer%20should%20I%20use%20for%20this%20query%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20hope%20some%20of%20you%20can%20help%20me%20out%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EKind%20regards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERik%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-286402%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EApplication%20Insights%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EQuery%20Language%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESolutions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EView%20Designer%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-286712%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286712%22%20slang%3D%22en-US%22%3EThat%20is%20an%20excellent%20training!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-286558%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286558%22%20slang%3D%22en-US%22%3E%3CP%3EBest%20place%20to%20learn%20the%20query%20language%20(I%20send%20everyone%20I%20talk%20to%20about%20Log%20Analytics%20here)%3A%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fapp.pluralsight.com%2Flibrary%2Fcourses%2Fkusto-query-language-kql-from-scratch%2Ftable-of-contents%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fapp.pluralsight.com%2Flibrary%2Fcourses%2Fkusto-query-language-kql-from-scratch%2Ftable-of-contents%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EEnjoy!%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-286553%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286553%22%20slang%3D%22en-US%22%3EThis%20one%20was%20perfect!%20Thank%20you!%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-286530%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286530%22%20slang%3D%22en-US%22%3E%3CP%3EHere%20is%20a%20query%20you%20can%20use%20to%20view%20CPU%20for%20computers%20reporting%20into%20Log%20Analytics.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%2F%2FCPU%20Time%3CBR%20%2F%3EPerf%3CBR%20%2F%3E%7C%20where%20CounterName%20%3D%3D%20%22%25%20Processor%20Time%22%3CBR%20%2F%3E%7C%20summarize%20CUPTime%3Davg(CounterValue)%26nbsp%3B%20by%20bin(TimeGenerated%2C%205m)%2C%20Computer%3CBR%20%2F%3E%7C%20render%20timechart%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERun%20this%20from%20the%20Logs%20or%20Logs(Classic)%20blade%20to%20see%20the%20results.%26nbsp%3B%20The%20ComputerName%20value%20%22%25%20Processor%20Time%22%20can%20be%20replaced%20by%20any%20other%20value%20if%20you%20want%20to%20chart%20something%20else.%26nbsp%3B%20Be%20sure%20these%20values%20are%20added%20for%20collection%20from%20the%20Advanced%20Settings%20%26gt%3B%20Data%20blade%20in%20the%20workspace.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETiles%20are%20used%20for%20pre-created%20views%20and%20queries%2C%20not%20for%20running%20queries.%26nbsp%3B%20Tiles%20can%20be%20added%20manually%20or%20with%20solutions.%26nbsp%3B%20The%20Security%20and%20Compliance%20solution%20gives%20a%20lot%20of%20useful%20information%2C%20it%20also%20will%20enable%20security%20log%20collection.%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20are%20looking%20for%20more%20on%20writing%20queries%2C%20take%20a%20look%20at%20the%20Pluralsight%20Kusto%20Query%20Language%20from%20Scratch%20course.%26nbsp%3B%20Microsoft's%20documentation%20has%20also%20improved%20quite%20a%20bit.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-286524%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286524%22%20slang%3D%22en-US%22%3E%3CP%3EI%20think%20you%20can%20make%20a%20quickstart%20by%20implementing%20the%20following%20solution%2C%20this%20will%20give%20you%20a%20lot%20of%20tiles%20out%20of%20the%20box%3A%3CBR%20%2F%3E%3CA%20href%3D%22http%3A%2F%2Fblogs.catapultsystems.com%2Fcfuller%2Farchive%2F2017%2F11%2F28%2Fupdating-the-server-and-client-performance-solution-to-the-new-query-language%2F%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fblogs.catapultsystems.com%2Fcfuller%2Farchive%2F2017%2F11%2F28%2Fupdating-the-server-and-client-performance-solution-to-the-new-query-language%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F59752i2388E23C3070D2EC%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22solution.png%22%20title%3D%22solution.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EDownload%20the%20solution%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgallery.technet.microsoft.com%2Fscriptcenter%2FServer-Performance-3d767ab1%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgallery.technet.microsoft.com%2Fscriptcenter%2FServer-Performance-3d767ab1%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-286509%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286509%22%20slang%3D%22en-US%22%3EHi%20Mark%2C%3CBR%20%2F%3EThanks%20for%20your%20fast%20reply!%20I%20have%20one%20last%20question%20though%2C%20can%20I%20use%20that%20query%20in%20the%20designer%3F%20If%20so%2C%20which%20tile%20should%20I%20use%3F%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20once%20again%20for%20helping%20me%20out!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-286460%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286460%22%20slang%3D%22en-US%22%3E%3CP%3EGetting%20this%20information%20is%20quite%20easy%20when%20using%20the%20Metrics%20in%20Azure%20Monitor%3A%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20852px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F59742i5EB3FCB1007AE474%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22metrics.png%22%20title%3D%22metrics.png%22%20%2F%3E%3C%2FSPAN%3E%3CBR%20%2F%3EIf%20you%20want%20to%20use%20log%20analytics%2C%20you%20could%20try%20something%20like%20this%3A%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F59743i31277F5DD5B02FE7%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22loganalytics.png%22%20title%3D%22loganalytics.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EAnother%20way%20of%20visualizing%20can%20be%20done%20using%20VM%20Insights%20from%20the%20VM%20Blade%20of%20from%20Azure%20Monitor%3A%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F59744i3278F18D01D7790E%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22insights.png%22%20title%3D%22insights.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESome%20good%20starting%20points%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Foverview%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Foverview%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flog-analytics%2Flog-analytics-queries%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flog-analytics%2Flog-analytics-queries%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fazure.microsoft.com%2Fnl-nl%2Fblog%2Frich-insights-for-virtual-machines-from-azure-monitor%2F%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fazure.microsoft.com%2Fnl-nl%2Fblog%2Frich-insights-for-virtual-machines-from-azure-monitor%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20fun%20with%20this%20amazing%20set%20of%20tools%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Deleted
Not applicable

Hello!

 

First and foremost, I'm new to Azure and Azure monitoring. That's why I'm starting this conversation.

I'm currently trying to migrate our SolarWinds monitor into the Azure monitoring portal, but I'm unable to carry on because my knowledge about queries is absolutely minimum. 

I would like some assistance when it comes to queries, does anybody for instance know a query to monitor the CPU load on different computers and/or servers? And which tile in the designer should I use for this query?

 

I hope some of you can help me out :)

 

Kind regards,

 

Rik

7 Replies
Highlighted

Getting this information is quite easy when using the Metrics in Azure Monitor:
metrics.png
If you want to use log analytics, you could try something like this:
loganalytics.png

Another way of visualizing can be done using VM Insights from the VM Blade of from Azure Monitor:
insights.png

 

Some good starting points:

https://docs.microsoft.com/en-us/azure/azure-monitor/overview

https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-queries

https://azure.microsoft.com/nl-nl/blog/rich-insights-for-virtual-machines-from-azure-monitor/

 

Have fun with this amazing set of tools :)

 

 

Highlighted
Hi Mark,
Thanks for your fast reply! I have one last question though, can I use that query in the designer? If so, which tile should I use?

Thanks once again for helping me out!
Highlighted

I think you can make a quickstart by implementing the following solution, this will give you a lot of tiles out of the box:
http://blogs.catapultsystems.com/cfuller/archive/2017/11/28/updating-the-server-and-client-performan...

solution.png

Download the solution here: https://gallery.technet.microsoft.com/scriptcenter/Server-Performance-3d767ab1

Highlighted

Here is a query you can use to view CPU for computers reporting into Log Analytics.

 

//CPU Time
Perf
| where CounterName == "% Processor Time"
| summarize CUPTime=avg(CounterValue)  by bin(TimeGenerated, 5m), Computer
| render timechart

 

Run this from the Logs or Logs(Classic) blade to see the results.  The ComputerName value "% Processor Time" can be replaced by any other value if you want to chart something else.  Be sure these values are added for collection from the Advanced Settings > Data blade in the workspace.

 

Tiles are used for pre-created views and queries, not for running queries.  Tiles can be added manually or with solutions.  The Security and Compliance solution gives a lot of useful information, it also will enable security log collection.  

 

If you are looking for more on writing queries, take a look at the Pluralsight Kusto Query Language from Scratch course.  Microsoft's documentation has also improved quite a bit.

 

 

Highlighted
This one was perfect! Thank you!

Highlighted

Best place to learn the query language (I send everyone I talk to about Log Analytics here):

https://app.pluralsight.com/library/courses/kusto-query-language-kql-from-scratch/table-of-contents

 

Enjoy!

Highlighted
That is an excellent training!