agentsclimarketplace

Azure monitor

Skill MicrosoftDocs/Agent-Skills/skills/azure-monitor

Expert knowledge for Azure Monitor development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring agents/DCRs, alerts/autoscale, Application Insights, KQL APIs, or Prometheus/OTel pipelines, and other Azure Monitor related development tasks. Not for Azure Network Watcher (use azure-network-watcher), Azure Service Health (use azure-service-health), Azure Defender For Cloud (use azure-defender-for-cloud), Azure Cost Management (use azure-cost-management).From its SKILL.md

Install
npx -y skills add MicrosoftDocs/Agent-Skills --skill azure-monitor

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

36.6 KB, ~7.8k tokens by cl100k_base, as published. Nobody here has run it

Azure Monitor Skill

This skill provides expert guidance for Azure Monitor. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLocationDescription
TroubleshootingL37-L98Diagnosing and fixing Azure Monitor issues: agents (AMA/Log Analytics/Diagnostics), data collection and pipelines, alerts, metrics/logs, Application Insights, containers, VM performance, and ITSM connectors.
Best PracticesL99-L137Best practices for configuring, tuning, and scaling Azure Monitor (logs, metrics, alerts, autoscale, AKS, VMs, costs, Prometheus/OTel) for performance, reliability, and cost efficiency.
Decision MakingL138-L177Guidance for planning migrations, choosing monitoring/alerting options, and optimizing Azure Monitor pipelines, workspaces, agents, OpenTelemetry, Grafana, and cost/billing.
Architecture & Design PatternsL178-L183Designing Azure Monitor architectures: enterprise-wide layouts, Private Link network patterns, choosing single vs multiple workspaces, and using workspace replication for resilience.
Limits & QuotasL184-L213Limits, quotas, scale/performance planning, ingestion/retention caps, query timeouts, and metric coverage for Azure Monitor, Application Insights, Prometheus, Container Insights, and Workbooks.
SecurityL214-L275Securing Azure Monitor and related services: auth, RBAC, network/TLS, private access, policies, secure ingestion, and querying/analyzing security and audit logs from many platforms.
Configurationconfiguration.mdConfiguring Azure Monitor end to end: agents, DCRs, pipelines, alerts, autoscale, workbooks, Private Link, and detailed log/metric schemas for Azure, multicloud, and Application Insights.
Integrations & Coding Patternsintegrations.mdPatterns and code for integrating Azure Monitor with apps and tools: sending custom/Prometheus/OTel data, querying via APIs/KQL, wiring alerts and ITSM, and scenario-based KQL for many log tables.
Deploymentdeployment.mdGuides for deploying and migrating Azure Monitor agents, alerts, diagnostics, and Application Insights Profiler at scale using Policy, ARM, CLI/PowerShell, and workspace replication.

Troubleshooting

TopicURL
Troubleshoot Azure Log Analytics Linux agent issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-linux-troubleshoot
Troubleshoot Log Analytics agent for Windowshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-windows-troubleshoot
Monitor and troubleshoot Azure Monitor Agent health at scalehttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-health
Troubleshoot Azure Monitor agent on Linux VMs and scale setshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-linux-vm
Fix syslog collection issues with Azure Monitor Agent on Linuxhttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-linux-vm-rsyslog
Fix Azure Monitor agent problems on Windows Arc servershttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-windows-arc
Diagnose Azure Monitor agent issues on Windows VMshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-windows-vm
Troubleshoot Azure Diagnostics extension issues on Azure resourceshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-troubleshooting
Use AMA Linux troubleshooter to diagnose agent issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/troubleshooter-ama-linux
Use AMA Windows troubleshooter to diagnose agent issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/troubleshooter-ama-windows
Troubleshoot Azure Log Analytics VM extension on Windows and Linuxhttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/vmext-troubleshoot
Use deep investigation examples to diagnose incidentshttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-deep-investigation-examples
Troubleshoot Azure Copilot Observability Agent issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-troubleshooting
Troubleshoot tenant-level Azure service health alertshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-create-tenant-level-service-heath-alerts
Diagnose and fix common Azure Monitor alert issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-troubleshoot
Diagnose and fix Azure Monitor log alert rule problemshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-troubleshoot-log
Resolve problems with Azure Monitor metric alertshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-troubleshoot-metric
Resolve ITSMC dashboard connector status errorshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-dashboard-errors
Fix ServiceNow sync and token issues for ITSMChttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-resync-servicenow
Troubleshoot Azure Monitor ITSM Connector issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-troubleshoot-overview
Interpret and resolve test action group error codeshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/test-action-group-errors
Investigate failures and performance with Application Insights viewshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/failures-performance-transactions
Troubleshoot telemetry issues using Application Insights SDK statshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/sdk-stats
Troubleshoot Azure Monitor autoscale behavior and actionshttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-troubleshoot
Use Live Data in Container insights for real-time AKS troubleshootinghttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-livedata-overview
Diagnose and fix Azure Monitor container log issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-troubleshoot
Troubleshoot Prometheus metrics collection in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/prometheus-metrics-troubleshoot
Monitor and troubleshoot DCR-based data collection in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-monitor
Troubleshoot Azure Monitor pipeline issues and errorshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-faq
Troubleshoot Azure Monitor pipeline deployment and data issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-troubleshoot
Troubleshoot stopped data collection in Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/data-collection-troubleshoot
Diagnose and alert on Log Analytics workspace healthhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-workspace-health
Monitor and troubleshoot Log Analytics workspace healthhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/monitor-workspace
Create and manage Azure Monitor summary ruleshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/summary-rules
Monitor and troubleshoot ingestion and query issues in Azure Monitor workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-monitor-health
Troubleshoot Azure Monitor metric chart issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-troubleshoot
Troubleshoot resource-scoped PromQL queries in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-resource-scoped-queries
Troubleshoot Azure Monitor Code Optimizations issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/optimization-insights/code-optimizations-troubleshoot
Troubleshoot Application Insights Profiler for .NEThttps://learn.microsoft.com/en-us/azure/azure-monitor/profiler/profiler-troubleshooting
Query AzureMonitorPipelineLogErrors for ingestion issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/azuremonitorpipelinelogerrors
Investigate CloudAuditEvents with Kusto querieshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/cloudauditevents
Analyze CloudProcessEvents for suspicious activityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/cloudprocessevents
Detect risky CloudStorageAggregatedEvents with querieshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/cloudstorageaggregatedevents
Query and analyze EdgeActionServiceLog in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/edgeactionservicelog
Use ZTSJobStatus log queries to diagnose workspace connectivityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/ztsjobstatus
Troubleshoot Azure Monitor DCR log collection issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/dcrlogtroubleshooting
Investigate DCR-based data collection errors via logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-insights-datacollectionrules
Troubleshoot Azure Monitor pipeline groups with error logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-monitor-pipelinegroups
Analyze Toolchain Orchestrator user diagnostics logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/touserdiagnostics
Interpret WOUserDiagnostics logs for workload orchestrationhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/wouserdiagnostics
Troubleshoot Application Insights Snapshot Debugger problemshttps://learn.microsoft.com/en-us/azure/azure-monitor/snapshot-debugger/snapshot-debugger-troubleshoot
Troubleshoot workbook-based insights in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/troubleshoot-workbooks
Access deprecated troubleshooting guides in Workbookshttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-access-troubleshooting-guide
Troubleshoot Copilot issues in Azure Workbookshttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-copilot-troubleshoot
Troubleshoot Azure VM performance with PerfInsightshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics
Analyze Azure VM PerfInsights diagnostic reportshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics-analyze
Use Azure Performance Diagnostics extension for VM issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics-extension
Troubleshoot Azure Monitor VM agent onboarding issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/vm-enable-troubleshoot

Best Practices

TopicURL
Optimize telemetry for accurate Observability Agent investigationshttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-best-practices
Author custom instructions for Observability Agent correlationhttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-custom-instructions
Optimize Azure Monitor log alert queries for performancehttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-log-query
Configure single metric alerts for multiple time serieshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-metric-multiple-time-series-single-rule
Apply architectural best practices for Azure Monitor alertshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/best-practices-alerts
Configure OpenTelemetry sampling for Application Insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/opentelemetry-sampling
Apply autoscale best practices in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-best-practices
Implement common autoscale patterns in Azurehttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-common-scale-patterns
Avoid and mitigate autoscale flapping scenarioshttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-flapping
Use multiple autoscale profiles for time-based scalinghttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-multiprofile
Apply Azure Monitor best practices for AKS clustershttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/best-practices-containers
Optimize Container Insights monitoring costs and configurationhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-cost
Design cost-effective alerting for AKS in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/cost-effective-alerting
Apply Azure Monitor best practices for Kubernetes layershttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/monitor-kubernetes
Apply best practices for Azure Monitor data collection ruleshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-rule-best-practices
Apply sample Azure Monitor transformation querieshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-transformations-samples
Optimize Azure Monitor configuration to reduce costshttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-cost
Implement multicloud monitoring for AWS and GCP with Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-multicloud
Configure Azure Monitor for operational excellencehttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-operation
Apply performance best practices in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-performance
Apply reliability best practices in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-reliability
Analyze Log Analytics usage to control Azure Monitor costshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/analyze-usage
Apply architectural best practices for Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/best-practices-logs
Parse and structure text data in Azure Monitor logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/parse-text
Identify and manage personal data in Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/personal-data-mgmt
Optimize Azure Monitor Logs query performancehttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/query-optimization
Best practices for scaling Azure Monitor workspaces with Prometheushttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice
Migrate from metrics API to getBatch for performancehttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/migrate-to-batch-api
Best practices for PromQL on OpenTelemetry metrics in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-opentelemetry-best-practices
Query system and Guest OS metrics with PromQL in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-system-metrics-best-practices
Optimize workbook performance with criteria parametershttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-criteria
Apply Azure Monitor best practices for VM monitoringhttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/best-practices-vm
Implement comprehensive VM monitoring with Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine
Create effective Azure Monitor alerts for VMshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine-alerts
Configure Azure Monitor data collection for virtual machineshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine-data-collection

Decision Making

TopicURL
Plan and execute migration from Log Analytics agent to AMAhttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration
Plan migration from Log Analytics Agent to Azure Monitor Agenthttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration-helper-workbook
Plan migration from WAD/LAD diagnostics to AMAhttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration-wad-lad
Plan and manage costs for Observability Agent usagehttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-billing
Choose appropriate Azure Monitor alert typeshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-types
Migrate from Application Insights SDKs to OpenTelemetryhttps://learn.microsoft.com/en-us/azure/azure-monitor/app/migrate-to-opentelemetry
Transition from Container Monitoring Solution to Container Insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-transition-solution
Choose OpenTelemetry integration options with Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-options
Choose Azure Monitor OTLP ingestion approachhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-summary
Choose between Azure Monitor metrics export and data plane APIhttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-plane-versus-metrics-export
Plan and size Azure Monitor pipeline throughputhttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-sizing
Decide how to migrate SCOM monitoring to Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/azure-monitor-operations-manager
Estimate Azure Monitor costs with pricing calculatorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/cost-estimate
Map Azure Monitor charges to billing meter nameshttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/cost-meters
Understand Azure Monitor billing and usage drivershttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/cost-usage
Migrate from Azure Monitor Logs batch and beta APIshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/migrate-batch-and-beta
Plan Azure Monitor availability zone protection for workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/availability-zones
Identify Azure Monitor tables supporting Basic planhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/basic-logs-azure-tables
Plan and optimize Azure Monitor Logs costshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/cost-logs
Decide and configure Azure Monitor dedicated clustershttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-dedicated-clusters
Choose Azure Monitor Logs table plans by usagehttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-table-plans
Plan migration from Splunk to Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/migrate-splunk-to-azure-monitor-logs
Choose and design Azure Log Analytics workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/workspace-design
Plan migration from self-hosted Prometheus to Azure Monitor managed Prometheushttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-migrate
Understand billing rules for Azure diagnostic settingshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/diagnostic-settings-faq
Migrate from diagnostic retention to Azure Storage lifecycle policieshttps://learn.microsoft.com/en-us/azure/azure-monitor/platform/migrate-to-azure-storage-lifecycle-policy
Migrate from SCOM Managed Instance to Azure Monitor DCRshttps://learn.microsoft.com/en-us/azure/azure-monitor/scom-manage-instance/migrate-to-azure-monitor
Plan and execute migration from SCOM Managed Instancehttps://learn.microsoft.com/en-us/azure/azure-monitor/scom-manage-instance/migration-faq-scom-manage-instance
Plan migration from SCOM Managed Instance to SCOM or Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/scom-manage-instance/migration-overview
Choose the right Azure Monitor visualization toolhttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/best-practices-visualize
Decide when to copy dashboards to Azure Managed Grafanahttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/visualize-copy-to-managed-grafana
Choose Grafana options for Azure Monitor datahttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/visualize-grafana-overview
Choose between OpenTelemetry and logs-based VM metricshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/metrics-opentelemetry-guest
Decide and migrate from logs-based to OpenTelemetry VM monitoringhttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/vm-opentelemetry-migrate
Plan for VM Insights Map and Dependency Agent retirementhttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/vminsights-maps-retirement
Migrate from deprecated VM insights DCR policieshttps://learn.microsoft.com/en-us/azure/azure-monitor/vm/vminsights-migrate-deprecated-policies

Architecture & Design Patterns

TopicURL
Design an enterprise monitoring architecture with Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/enterprise-monitoring-architecture
Design Azure Monitor Private Link architecturehttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/private-link-design

Limits & Quotas

TopicURL
Plan Azure Monitor Agent performance for gateway forwardinghttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-performance
Check Azure Monitor Agent platform and resource requirementshttps://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-requirements
Manage Azure Monitor alert instance retention and statehttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-manage-alert-instances
Monitor and interpret log alert rule health in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/log-alert-rule-health
Deploy log search alert rules with ARM templates and size limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/resource-manager-alerts-log
Application Insights usage limits and operational behaviors FAQhttps://learn.microsoft.com/en-us/azure/azure-monitor/app/application-insights-faq
Configure and understand Application Insights availability testshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/availability
Configure predictive autoscale thresholds and history requirementshttps://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-predictive
Enable high-scale log collection limits in Container Insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-high-scale
Use region mappings for Container Insights and Log Analyticshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-region-mapping
Configure autoscaling limits for Azure Managed Prometheus addon podshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/prometheus-metrics-scrape-autoscaling
Plan Prometheus scraping performance and scale in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/prometheus-metrics-scrape-scale
Check supported resources and regions for metrics exporthttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/metrics-export-reference
Review supported resource types and regions for platform logshttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/platform-logs-reference
Azure Monitor platform limits and quotas referencehttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/service-limits
Understand caching behavior in Logs Query APIhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/cache
Use cross-workspace query limits in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/cross-workspace-queries
Configure Azure Monitor logs query timeouts and limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/timeouts
Configure Azure Monitor logs query timeouts and limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/timeouts
Configure daily ingestion caps for Log Analytics workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/daily-cap
Understand Azure Monitor log data ingestion latencyhttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/data-ingestion-time
Tables supporting ingestion-time transformations in Log Analyticshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/tables-feature-support
Monitor Azure Monitor workspace metrics ingestion limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-monitor-ingest-limits
Technical details and limits for Azure Monitor managed Prometheushttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-metrics-details
Azure Workbooks data source and parameter limitshttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-limits
Use Azure Workbooks visualization types effectivelyhttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-visualizations

Security

TopicURL
Understand data handling and governance for Observability Agenthttps://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-governance-faq
Secure ITSM integrations with Azure Monitor Secure Webhookhttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/it-service-management-connector-secure-webhook-connections
Configure Azure for Secure Webhook ITSM integrationshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsm-connector-secure-webhook-connections-azure-configuration
Use Application Insights smart detection to identify security issueshttps://learn.microsoft.com/en-us/azure/azure-monitor/alerts/proactive-application-security-detection-pack
Enable Microsoft Entra authentication for Application Insights ingestionhttps://learn.microsoft.com/en-us/azure/azure-monitor/app/azure-ad-authentication
Configure IP collection and geolocation in Application Insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/app/ip-collection
Migrate Container Insights from legacy to managed identity authenticationhttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-authentication
Configure secure access to Live Data in Container insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-livedata-setup
Choose TLS options for Azure Monitor pipeline ingestionhttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-tls
Configure automated TLS certificates for Azure Monitor pipelinehttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-tls-automated
Configure customer-managed TLS for Azure Monitor pipelinehttps://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-tls-custom
Configure Azure Monitor network and firewall accesshttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/azure-monitor-network-access
Securely configure and deploy Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-security
Configure Network Security Perimeter for Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/network-security-perimeter
Apply Network Security Perimeter scenarios to Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/network-security-perimeter-scenarios
Built-in Azure Policy definitions for Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/policy-reference
Secure Azure Monitor access with Private Link scopeshttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/private-link-security
Apply RBAC roles and permissions in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/roles-permissions-security
Apply RBAC roles and permissions in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/roles-permissions-security
Use Azure Policy compliance controls for Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/security-controls-policy
Use Azure Policy compliance controls for Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/security-controls-policy
Register Entra app for Azure Monitor API tokenshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/register-app-for-token
Configure customer-managed keys for Azure Monitor logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/customer-managed-keys
Design granular RBAC for Azure Monitor Log Analyticshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/granular-rbac-log-analytics
Configure row-level access with granular RBAC in Log Analyticshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/granular-rbac-use-case
Configure access control for Azure Log Analytics workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/manage-access
Configure table-level RBAC for Log Analytics workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/manage-table-access
Configure protected tables and RBAC in Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/azure-monitor/logs/protected-tables-configure
Manage access control for Azure Monitor workspaceshttps://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-manage-access
Analyze Defender serverless security plugin data logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/appserviceserverlesssecurityplugindata
Use ArcK8sAudit Kubernetes API audit logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/arck8saudit
Analyze ArcK8sAuditAdmin modifying Kubernetes API operationshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/arck8sauditadmin
Analyze AzureAttestationDiagnostics attestation request logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/azureattestationdiagnostics
Use AzureDevOpsAuditing logs to track DevOps changeshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/azuredevopsauditing
Leverage BehaviorAnalytics Sentinel UEBA enriched eventshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/behavioranalytics
Use BehaviorEntities table for Defender entity behaviorshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/behaviorentities
Analyze BehaviorInfo table for Defender behavior insightshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/behaviorinfo
Use CampaignInfo table for Defender for Office 365 campaignshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/campaigninfo
Analyze CassandraAudit CQL operation and login audit logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/cassandraaudit
Understand DatabricksRBAC audit log schema in Azure Monitorhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksrbac
Review DatabricksRemoteHistoryService credential audit schemahttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksremotehistoryservice
Use DatabricksRFA access request audit logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksrfa
Inspect DatabricksSecrets audit log schemahttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickssecrets
Analyze DatabricksSQLPermissions audit log schemahttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickssqlpermissions
Use DatabricksSSH audit log table schemahttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksssh
Monitor GCPIAM identity and access logs in Sentinelhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/gcpiam
Query GoogleCloudSCC security findings in Sentinelhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/googlecloudscc
Monitor HDInsightGatewayAuditLogs authentication activityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/hdinsightgatewayauditlogs
Audit Azure AD tenant activity with Monitor tableshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-graph-tenants
Audit Azure API for FHIR with Monitor tableshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-healthcareapis-services
Monitor Azure Health Data DICOM service activityhttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-healthcareapis-workspaces
Audit Windows 365 operations with Intune logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-intune-operations
Audit Kubernetes API activity on Arc-connected clustershttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-kubernetes-connectedclusters
Audit Nexus bare metal machine security and metrics logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-networkcloud-baremetalmachines
Audit Synapse RBAC operations with SynapseRbacOperations logshttps://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/synapserbacoperations
Run resource-scoped Prometheus queries securely in Grafanahttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/grafana-resource-scoped-queries
Call Azure Monitor-managed Grafana APIs with Entra IDhttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/visualize-call-grafana-api
Secure Azure Monitor workbooks with customer storagehttps://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-bring-your-own-storage

What ships with it: 3 files

234.5 KB alongside SKILL.md

Keep looking

Skills are one crate of 325,949. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.