Azure Monitor for VMs - Service Map - Cannot expand Nodes

%3CLINGO-SUB%20id%3D%22lingo-sub-1236286%22%20slang%3D%22en-US%22%3EAzure%20Monitor%20for%20VMs%20-%20Service%20Map%20-%20Cannot%20expand%20Nodes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1236286%22%20slang%3D%22en-US%22%3E%3CP%3EAfter%20provisioning%20Azure%20Monitor%20for%20VMs%2C%20data%20collection%20worked%20fine%20and%20service%20map%20was%20working%20properly%20under%20Insights%20for%20the%20respective%20VMs.%20Currently%2C%20nodes%20can't%20be%20expanded%20in%20the%20graphical%20view%2C%20so%20processes%20and%20servers%20can't%20be%20displayed%20in%20the%20map.%20When%20clicking%26nbsp%3B%3CSTRONG%3EExpand%20Node%3C%2FSTRONG%3E%20nothing%20happens%2C%20same%20when%20clicking%20the%20triangle%20icon%20to%20expand.%20When%20trying%20to%20the%20current%20VM's%20node%2C%20all%20items%20in%20the%20view%20get%20ordered%20in%20a%20grid%20pattern%2C%20connection%20lines%20disappear%20and%20no%20additional%20info%20is%20displayed.%20We've%20tried%20this%20in%20different%20browsers%20(firefox%2C%20chrome%2C%20edge)%20on%20different%20machines%20with%20different%20accounts%20-%20same%20issue%20everywhere.%20The%20Issue%20started%20about%20a%20month%20ago%2C%20but%20it%20has%20worked%20for%20us%20before%20(and%20I%20might%20add%20it's%20a%20pretty%20cool%20tool%20when%20it%20works%2C%20e.g.%20to%20quickly%20give%20customers%2Fstakeholders%2Fnewly%20onboarded%20people%2Fsupport%20insights).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1236286%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Monitor%20for%20VMs%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EInsights%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EService%20Map%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1237421%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20for%20VMs%20-%20Service%20Map%20-%20Cannot%20expand%20Nodes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1237421%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F382776%22%20target%3D%22_blank%22%3E%40CountZero%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAre%20you%20using%20Service%20Map%20from%20Log%20Analytics%20or%20VM%20Insights%2C%20try%20VM%20Insights%20as%20linked%20to%20in%20the%20portal.%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorClive%20Watson_0%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1239151%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20for%20VMs%20-%20Service%20Map%20-%20Cannot%20expand%20Nodes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1239151%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F239477%22%20target%3D%22_blank%22%3E%40Clive%20Watson%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20using%20it%20from%20VM's%20blade%20%26gt%3B%20Monitoring%20(category)%20%26gt%3B%20Insights%2C%20where%20%22Map%22%20is%20the%20default%20view.%20We%20don't%20have%20the%20Service%20Map%20solution%20enabled%20in%20the%20Log%20Analytics%20workspace.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEdit%20(3m%20after%20post)%3A%20I've%20also%20used%20CTRL%2BF5%2Fprivate%20modes%2Fcleared%20cache%20on%20the%20browsers%2C%20just%20in%20case.%20Issue%20persists.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1239499%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20for%20VMs%20-%20Service%20Map%20-%20Cannot%20expand%20Nodes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1239499%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F382776%22%20target%3D%22_blank%22%3E%40CountZero%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESo%20this%20never%20expands%3F%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Annotation%202020-03-19%20190828.jpg%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F178230iDF2298375A992429%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Annotation%202020-03-19%20190828.jpg%22%20alt%3D%22Annotation%202020-03-19%20190828.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDo%20you%20get%20anything%20when%20you%20open%20the%20workbooks%3F%26nbsp%3B%20You%20have%20the%20dependency%20agent%20installed%20ok%20as%20well%2C%20as%20the%20Microsoft%20Management%20Agent%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1239812%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20for%20VMs%20-%20Service%20Map%20-%20Cannot%20expand%20Nodes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1239812%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F239477%22%20target%3D%22_blank%22%3E%40Clive%20Watson%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EExactly%2C%20the%20little%20expand%2Farrow%20icon%20as%20well%20as%20right%20click%20%26gt%3B%20expand%20node%20do%20not%20work%20as%20shown%20in%20your%20screenshot.%20They%20have%20however%20done%20so%20before%2C%20for%20the%20same%20VMs%20after%20we've%20provisioned%20the%20MMAExtension%2FDependencyAgentWindows%20or%20OMSExtension%2FDependencyAgentLinux%20extensions%20respectively.%3CBR%20%2F%3E%3CBR%20%2F%3EHowever%2C%20at%20the%20time%20of%20writing%20this%20I%20have%20tried%20it%20again%20with%20the%20same%20VMs%20as%20during%20my%20last%20post%20earlier%20and%20it%20does%20work%20now.%20I%20think%20it%20%3CEM%3Emay%3C%2FEM%3E%20have%20been%20related%20to%20an%20issue%20with%20a%20data%20collection%20cap%20being%20hit%20on%20the%20Log%20Analytics%20workspace%2C%20regarding%20which%20I%20made%20a%20change%20in%20the%20meantime.%20I'll%20check%20with%20other%20users%20whom%20I%20encountered%20this%20issue%20with%20at%20the%20end%20of%20february%3B%20whether%20it's%20working%20properly%20again%20for%20them%20too.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1243691%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20for%20VMs%20-%20Service%20Map%20-%20Cannot%20expand%20Nodes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1243691%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F239477%22%20target%3D%22_blank%22%3E%40Clive%20Watson%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt's%20working%20for%20us%20now%20-%20it%20seems%20like%20there%20might%20have%20been%20a%20lack%20of%20data%20or%20only%20partial%20data%20available%2C%20e.g.%20the%20nodes%20said%20%221%20Server%22%20or%20%227%20Clients%22%2C%20but%20expanding%20the%20node%20returned%20no%20list%20of%20those%20items.%20The%20only%20thing%20I%20did%20between%20the%20inital%20post%20and%20it%20working%20again%20was%20to%20raise%20the%20daily%20data%20cap%20in%20the%20log%20analytics%20workspace.%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1246051%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20for%20VMs%20-%20Service%20Map%20-%20Cannot%20expand%20Nodes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1246051%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20Glad%20to%20here%20its%20working%20now.%26nbsp%3B%20Its%20always%20a%20challenge%20if%20you%20are%20data%20capping%20the%20workspace%2C%20as%20you%20cant%20be%20selective%20of%20the%20data%20that%20gets%20through%20(sounds%20like%20the%20expansion%20couldn't%20proceed%20as%20there%20wasn't%20data%20available)%20.%26nbsp%3B%20Maybe%20you%20need%20to%20report%20on%20daily%2Fweekly%20usage%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EExample.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fms.portal.azure.com%23%4072f988bf-86f1-41af-91ab-2d7cd011db47%2Fblade%2FMicrosoft_Azure_Monitoring_Logs%2FDemoLogsBlade%2FresourceId%2F%252FDemo%2Fsource%2FLogsBlade.AnalyticsShareLinkToQuery%2Fq%2FH4sIAAAAAAAAA12RT2sCMRDF74Lf4bGnRBZ0pT2VFZQW6aUXpVeJm3E3sLspk6T%25252BoR%25252B%25252Bibbaeslh3pvJm9%25252B05DFvW7snvVx8ED%25252BrI0o8PgHjMVZRVH3UiT18w%25252BQa2%25252BrhIPTG9tgb3zgbuKJyrbYtvamOMBoOvrBviAlr09GSemLlSWMG5xV7u9PqKFRtRaGlvJk3r25h2jbNQVlizYGS6ELXKTYnwkvv2ZCL4Sobei9kjlWsLxexwrGiRfSKTRpCOikYQxST6cPo%25252BkiZTyWwPeKaN%25252F%25252F7cfrQsiZOlp%25252Fhmlz1P8i8rpnqtNO7akNMmzRxsceFIjYXsXmLAsL2JLGzfIMHOlREmnQeFzdVA5XgOxxtSD2N%25252BqSEXJ2Rc4g0UnvtGROIE7E9M6ODp15fDvObwpiduM82u79tnhVZnk0y%25252BQ273ZlY%25252BAEAAA%25253D%25253D%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EGo%20to%20Log%20Analytics%20and%20run%20query%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-cpp%22%3E%3CCODE%3Elet%20AllowedGBperDay%20%3D%205%3B%20%20%2F%2F%20Set%20an%20Alert%20threshold%0Aunion%20withsource%3DTableName%20*%0A%7C%20where%20TimeGenerated%20%26gt%3B%20startofday(ago(1d))%0A%7C%20where%20_IsBillable%20%3D%3D%20True%0A%7C%20summarize%20Entries%20%3D%20count()%2C%20SizeGB%20%3D%20round(sum(_BilledSize%20%2F%20(1024*1024*1024))%2C2)%20%20by%20TableName%2C%20_IsBillable%0A%7C%20order%20by%20SizeGB%20desc%0A%7C%20summarize%20AggregatedValue%20%3D%20sum(SizeGB)%0A%2F%2F%20set%20to%201%20(one)%20for%20threshold%20exceeded%2C%20which%20allows%20you%20to%20have%20an%20alert%20rule%20for%20gtr%200%20(zero)%0A%7C%20extend%20AlertValue%20%3D%20iif(AggregatedValue%20%26gt%3B%20AllowedGBperDay%2C%221%22%2C%220%22)%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20use%20this%20in%20a%20Azure%20Monitor%20Alert.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Deleted
Not applicable

After provisioning Azure Monitor for VMs, data collection worked fine and service map was working properly under Insights for the respective VMs. Currently, nodes can't be expanded in the graphical view, so processes and servers can't be displayed in the map. When clicking Expand Node nothing happens, same when clicking the triangle icon to expand. When trying to the current VM's node, all items in the view get ordered in a grid pattern, connection lines disappear and no additional info is displayed. We've tried this in different browsers (firefox, chrome, edge) on different machines with different accounts - same issue everywhere. The Issue started about a month ago, but it has worked for us before (and I might add it's a pretty cool tool when it works, e.g. to quickly give customers/stakeholders/newly onboarded people/support insights).

6 Replies

@Deleted 

 

Are you using Service Map from Log Analytics or VM Insights, try VM Insights as linked to in the portal.

 

 

@CliveWatson 

I'm using it from VM's blade > Monitoring (category) > Insights, where "Map" is the default view. We don't have the Service Map solution enabled in the Log Analytics workspace.

 

Edit (3m after post): I've also used CTRL+F5/private modes/cleared cache on the browsers, just in case. Issue persists.

@Deleted 

 

So this never expands?

Annotation 2020-03-19 190828.jpg

 

Do you get anything when you open the workbooks?  You have the dependency agent installed ok as well, as the Microsoft Management Agent ?

@CliveWatson 

Exactly, the little expand/arrow icon as well as right click > expand node do not work as shown in your screenshot. They have however done so before, for the same VMs after we've provisioned the MMAExtension/DependencyAgentWindows or OMSExtension/DependencyAgentLinux extensions respectively.

However, at the time of writing this I have tried it again with the same VMs as during my last post earlier and it does work now. I think it may have been related to an issue with a data collection cap being hit on the Log Analytics workspace, regarding which I made a change in the meantime. I'll check with other users whom I encountered this issue with at the end of february; whether it's working properly again for them too.

@CliveWatson 

It's working for us now - it seems like there might have been a lack of data or only partial data available, e.g. the nodes said "1 Server" or "7 Clients", but expanding the node returned no list of those items. The only thing I did between the inital post and it working again was to raise the daily data cap in the log analytics workspace. Thanks!

Hi, Glad to here its working now.  Its always a challenge if you are data capping the workspace, as you cant be selective of the data that gets through (sounds like the expansion couldn't proceed as there wasn't data available) .  Maybe you need to report on daily/weekly usage?

 

Example.

Go to Log Analytics and run query 

let AllowedGBperDay = 5;  // Set an Alert threshold
union withsource=TableName *
| where TimeGenerated > startofday(ago(1d))
| where _IsBillable == True
| summarize Entries = count(), SizeGB = round(sum(_BilledSize / (1024*1024*1024)),2)  by TableName, _IsBillable
| order by SizeGB desc
| summarize AggregatedValue = sum(SizeGB)
// set to 1 (one) for threshold exceeded, which allows you to have an alert rule for gtr 0 (zero)
| extend AlertValue = iif(AggregatedValue > AllowedGBperDay,"1","0")

 

I use this in a Azure Monitor Alert.