Modern applications leverage a variety of services, and often span across on premises, IaaS, PaaS and SaaS. Monitoring these environments is different from traditional systems. We have more and more data available from the platform with the likes of ARM Activity Logs, Azure Monitor, Log Analytics and Application Insights. With a massive amount of signal and noise being generated in all these systems, how do we get our arms around what is happening? Is my application impacted in an ongoing Azure outage? Are my integrations intact? Which services from Azure should I use to monitor my application end-to-end? Come and hear how to answer these questions. After the session, you’ll have deeper understanding of end-to-end monitoring techniques in Azure solutions and know which services to choose for which scenario. As presented in Rotterdam at Azure Low Lands 2019.

1. @fincooper
Monitoring Real-Life Azure
Applications
When to use what and why?

2. @fincooper
Thank you to our sponsors!
Gold Sponsors
Silver Sponsors
Community Sponsors

3. @fincooper
Karl Ots
Managing Consultant
karl.ots@zure.com
• Cloud & cybersecurity expert
• User group and conference organizer, podcast hosts
• Patented inventor
• Working on Azure since 2011
• Helped to secure 100+ Azure applications, from startups to
Fortune 500 enterprises
• linkedin.com/in/karlots

4. @fincooper
Monitoring

5. @fincooper
Azure Monitoring scene
Application
Insights
Azure Monitor Azure Health
ARM Activity
Logs
System Center
Operations
Manager
Operations
Management
Suite
Log Analytics
Network
Watcher
Application
Gateway /
WAF
Secure
DevOps Kit for
Azure (AzSK)
Security
Center

6. @fincooper
Microsoft Ignite Branding changes
• Azure Monitor = Application Insights + Log Analytics + more
• Operations Management Suite (OMS) was a bundling of the following Azure
management services for licensing purposes:
• Application Insights
• Azure Automation
• Azure Backup
• Log Analytics
• Site Recovery
• Kusto -> Data Explorer Query Language

7. @fincooper
Azure Monitoring
Application
Host
Infrastructure
Platform
• Application Insights
• Web Application Firewalls
• Vulnerability Scanners
• Microsoft Monitoring Agent
• Service Map and other Log Analytics Solution Packs
• Azure Security Center
• Azure Monitor
• Secure DevOps kit for Azure (AzSK)
• Network Watcher
• Activity Logs
• Azure Monitor
• Azure Health

8. @fincooper
Azure Activity Logs
• Monitors Azure Platform level operations:
• What operations were taken on the resources in your subscription
• HTTP Operations on your Resource Providers
• Who initiated the operation
• Default retention time is only 90 days!

9. @fincooper
Azure Monitor
• Metrics and Logs
• Built-In monitoring support
for all Azure resources
• Out-of-the-box Metrics, such
as:
• Total active connections on
Azure DB for MySQL
• Number of throttling errors for
IoT Hub
• Number of dead lettered
messages in Service Bus
• Exposed as an API

10. @fincooper
Azure Monitor Metrics are
available for 90 days!

11. @fincooper
Azure Monitor: Logs

12. @fincooper
Azure Monitor: Resource Group Insights

13. @fincooper
Azure Monitor: Virtual Machine Insights

14. @fincooper
DEMO

15. @fincooper
Putting it all together
Activity Logs:
Monitor all your Azure Platform level
operations.
Azure Monitor
Metrics:
Single pane of glass for all
your Azure Infrastructure
monitoring.
Azure Monitor Logs:
ingest all monitoring data
from Azure Platform,
Infrastructure, Host and
Application layers across your
Azure Subscriptions. Perform
analytics with Data Explorer
Query Language .

16. @fincooper
Collecting Azure logs in the enterprise
Log
Analytics
EventHub
Azure Account 1
Azure Account 2
Azure Account 3
SOC
Application
Host
Infrastructure
Platform
Azure Security
Center
Application
Insight
Azure Monitor Azure Advisor
Backup
Activity Logs
Application
Host
Infrastructure
Platform
Azure Security
Center
Application
Insight
Azure Monitor Azure Advisor
Backup
Activity Logs
Application
Host
Infrastructure
Platform
Azure Security
Center
Application
Insight
Azure Monitor Azure Advisor
Backup
Activity Logs

17. @fincooper
Materials
• Data Explorer Query Language course
• aka.ms/KQLPluralsight
• Azure Monitor
• aka.ms/MonitoringDocs
• Tutorials, videos and more
• aka.ms/AzMonOverview
• These slides
• zure.ly/karl-slides

18. @fincooper
Next up at #AzureLowLands
Track 1
• 14:20 – 15:05
• Cloud Architecture Recipes For The
Enterprise
• Eldert Grootenboer
Track 2
• 14:20 – 15:05
• Azure Data Lake
• Rick van den Bosch