SOLVED

Azure Monitor for VMs - Log Queries

%3CLINGO-SUB%20id%3D%22lingo-sub-1537133%22%20slang%3D%22en-US%22%3EAzure%20Monitor%20for%20VMs%20-%20Log%20Queries%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1537133%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I've%20installed%20Azure%20Monitor%20for%20VMs%20and%20I%20was%20under%20the%20impression%20we%20would%20need%20to%20change%20our%20existing%20Log%20Queries%20to%20stop%20using%20the%20Perf%20table%20for%20CPU%2FDisk%2FMemory%2Fetc%20and%20start%20using%20some%20of%20the%20tables%20under%20the%20%22Azure%20Monitor%20for%20VMs%22%20group%20in%20Log%20Analytics%20(InsightsMetrics%2C%20etc.).%20However%2C%20looking%20at%20sample%20queries%20for%20CPU%2C%20disk%2C%20memory%2C%20etc.%2C%20they%20all%20seem%20to%20still%20use%20the%20Perf%20table.%20Is%20that%20corect%3F%20We%20did%20not%20install%20the%20preview%20version%20of%20Azure%20Monitor%20for%20VMs.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20you%20share%20some%20examples%20where%20I%20would%20use%20the%20tables%20such%20as%20InsightsMetrics.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1537833%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20for%20VMs%20-%20Log%20Queries%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1537833%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F194155%22%20target%3D%22_blank%22%3E%40Jonathan%20Rossi%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlenty%20of%20examples%20here%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Finsights%2Fvminsights-alerts%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Finsights%2Fvminsights-alerts%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20that%20help%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1537936%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20for%20VMs%20-%20Log%20Queries%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1537936%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F194155%22%20target%3D%22_blank%22%3E%40Jonathan%20Rossi%3C%2FA%3E%26nbsp%3Byou're%20right%2C%20there%20are%202%20separate%20performance%20tables.%3C%2FP%3E%0A%3CP%3EPerf%20is%20still%20the%20default%20table%2C%20it%20holds%20the%20performance%20counters%20you%20chose%20to%20collect%20(at%20the%20workspace%20level).%20The%20previous%20version%20of%20VM%20Insights%20used%20it%20as%20well.%20The%20new%20version%20of%20VM%20Insights%20now%20collects%20performance%20metrics%20into%20the%20InsightsMetrics%20table.%20The%20sample%20queries%20that%20you%20see%20for%20any%20VM%20resource%2C%20on%20its%20Logs%20page%2C%20use%20the%20Perf%20table%2C%20regardless%20of%20the%20VMInsights%20version%20you%20install.%3C%2FP%3E%0A%3CP%3EIf%20you're%20concerned%20about%20having%20both%20Perf%20and%20InsightsMetrics%2C%20read%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Finsights%2Fvminsights-ga-release-faq%23what-should-i-do-about-the-performance-counters-in-my-workspace-if-i-install-the-vminsights-solution%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Ethis%20FAQ%20entry%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3EThe%20link%20provided%20on%20the%20first%20reply%20to%20your%20question%20(to%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Finsights%2Fvminsights-alerts%23sample-alert-queries%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Esample%20alert%20queries%3C%2FA%3E)%20has%20the%20best%20examples%20to%20querying%20InsightsMetrics%20I%20could%20find.%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi, I've installed Azure Monitor for VMs and I was under the impression we would need to change our existing Log Queries to stop using the Perf table for CPU/Disk/Memory/etc and start using some of the tables under the "Azure Monitor for VMs" group in Log Analytics (InsightsMetrics, etc.). However, looking at sample queries for CPU, disk, memory, etc., they all seem to still use the Perf table. Is that corect? We did not install the preview version of Azure Monitor for VMs. 

 

Can you share some examples where I would use the tables such as InsightsMetrics.

 

Thanks!

2 Replies
best response confirmed by Jonathan Rossi (New Contributor)
Solution

@Jonathan Rossi you're right, there are 2 separate performance tables.

Perf is still the default table, it holds the performance counters you chose to collect (at the workspace level). The previous version of VM Insights used it as well. The new version of VM Insights now collects performance metrics into the InsightsMetrics table. The sample queries that you see for any VM resource, on its Logs page, use the Perf table, regardless of the VMInsights version you install.

If you're concerned about having both Perf and InsightsMetrics, read this FAQ entry.

The link provided on the first reply to your question (to sample alert queries) has the best examples to querying InsightsMetrics I could find.