Skip to main content
Microsoft

Azure Monitor & Log Analytics

Microsoft's unified observability stack — metrics, logs (KQL-based), traces, alerts and dashboards in one platform.

Overview

Azure Monitor & Log Analytics in practice

Azure Monitor and Log Analytics form the observability layer of the Microsoft stack: metrics, logs, traces, alerts and dashboards converge in one workspace and are queried with KQL. Application Insights adds the application view, while data collection rules decide what an agent sends in the first place. Cost is settled at ingestion, not at query time — so every design starts with the choice of table plan: Analytics for everything that is actively analysed and alerted on, the cheaper Basic and Auxiliary plans for logs kept only for later investigation.

Commitment tiers apply to analytics data alone. From 100 gigabytes a day a dedicated cluster pays off, pooling several workspaces into one tier and allowing customer-managed keys; the commitment binds for 31 days. Alendris has built this architecture for an energy utility — consolidated data collection rules, a dedicated cluster and the entire configuration versioned in Bicep.

References

From our projects