KQL query join error
Hi All, The below query works in Azure Graph Explorer. However, when I include the code snippet in PowerShell, I receive the following error. search-azgraph : { "error": { **"code": "BadRequest",** **"message":…
Azure Monitor
Azure VM Disk IOPs report with Disk details
Hi, I'm trying to fetch the IOPs report of the Azure VMs disk with some additional information such as Disk assigned letter, Disk Name, Disk size, Disk size utilization, Read Iops, Write IOPs & etc.. I've the query created but the problem is the…
Azure Monitor

Azure Monitor Alert Rule for Service Bus Abandoned Messages
I am attempting to set up an alert rule for Azure Service Bus using the signal Abandoned Messages. The definition for abandoned messages suggests that the alert should trigger when a message is not received and the delivery count increases. However, I…
Azure Monitor
Azure Health Issue (See Photo Below)
Is this something to be concerned about. I am the new IT Manager for my company, and I wanted to double check on this. I usually dealt with RSAT AD and just want to be sure
Azure Monitor
How to fix diagnostic data showing pending
Device diagnostic show "Pending Diagnostics Upload". How do you resolve this? The device is connected on our network. I am able to sync to it.
Azure Monitor
Test test test
What is the difference between the AMA and MMA agent
Azure Monitor
The metrics getBatch API is not returning average as aggregration
The documentation here gives this example which should return total, average, minimum, and maximum aggregations. I get none of them back in the timeseries objects. I obviously used my own subscription and details. POST…
Azure Monitor
Need Help with Syslog/CEF via AMA Setup – Logs Reaching Syslog Server but Not Showing in Sentinel
Question: Hi Community, We’re working on forwarding logs from a non-Azure environment (YoTTA Cloud) to Microsoft Sentinel, and need help finalizing the setup. 🖥️ Environment Overview: Cloud: YoTTA Cloud 17 Linux servers used for different roles Logs…
Azure Monitor
Not getting Activated Severity email notifications for alert
We are experiencing an issue with Azure Monitor alerts across multiple services in our subscription. Previously, the alerts were working as expected — both the "Activated Severity" and "Deactivated Severity" email notifications were…
Azure Monitor
Unable to Delete a Log Analytics Workspace in Azure
While I am the Owner of the Subscription & Resource Group, I cannot delete a Log Analytics Workspace because there is a system assigned Deny Assignment on the Resource Group for All Principals. What do I need to do to delete this service and…
Azure Monitor
{"sessionId":"0572f13698724b4eae5a507844ab33e9","subscriptionId":"","resourceGroup":"","errorCode":"401","resourceName":"","details":"You do not have authorization to access this resource. /subscriptions/be3cf71c-3fef-4336-b06e-bc6891ab0017/resourceGroups
i am an owner of this subsciption but still getting this error for permission. …
Azure Monitor
No Logs Appearing in AZMSOperationalLogs Despite Enabled Diagnostic Settings for Service Bus
I'm not seeing any logs in the AZMSOperationalLogs table in Log Analytics, even though diagnostic settings are enabled for the Service Bus with all log categories selected. I can also confirm that there has been activity on the Service Bus topics and…
Azure Monitor

Issue with Log Analytics Access via Global Secure Access and Private AMPLS Setup
Hi There, We are currently leveraging Global Secure Access (GSA) with per-app access configurations to securely connect to several Azure services including Databricks, Key Vault, and Log Analytics. Our setup uses Azure Monitor Private Link Scope (AMPLS)…
Azure Monitor
Log analytics table "Azure Diagnostics" more than 1.5 TB
Hello, we have a log analytics which has a table Azure Diagnostics that has a size of 1.5TB (monthly). So the cost is becoming very high, we noticed that there is a column called "Engine" that ingests lots of logs per day caused by Azure…
Azure Monitor
Want to do ingestion time Data Collection Rule (DCR) but use field from another table to make decision
We want to ingest DeviceEvents from Defender but since the DeviceInfo is the table that holds the Manual Tags, we can't make a decision on field in DeviceEvents alone. What I'd want to do is something like this KQL that I can run in Sentinel logs where…
Azure Monitor
My Bicep deployment is demanding a "format" parameter when it's not even supported
I have a basic Bicep resource that I am trying to deploy and it fails every single time with an error that makes absolutely no sense: "Value cannot be null. Parameter name: format" "format" is not a parameter that this resource…
Azure Monitor
Azure Availability test in Azure Application insight
Hello team. I have a requirement to configure Azure Availability test in Azure application insight. the requirement is to when there is a failure in first endpoint, I have to check 2nd end point availability and if there is no failure in 1st then no need…
Azure Monitor
How can I delete data from a Log workspace table
Hi Support, I would like to know if it is possible to drop data from a Log Analytics workspace table. I performed some tests and generated a large amount of diagnostic logs in the workspace table named "AzureDiagnostics." Now, I want to remove…
Azure Monitor
Ensure your resources interacting with Azure Monitor are using TLS 1.2 or later before 1 July 2025
Hi team, I received an email "Ensure your resources interacting with Azure Monitor are using TLS 1.2 or later before 1 July 2025", and in the email, it tells me I can check the service retirement workbook to see the impacted resources, but in…
Azure Monitor
Getting "Daily Quota Exceeded" with Azure Monitor OpenTelemetry Exporter and Node.JS
Hi all, I have some pods running Node.JS and the Azure Monitor OpenTelemetry Exporter in AKS, sending data to Application Insights via instrumentation key. Recently many log entries started to appear with "Daily Quota Exceeded", however the…