Collect and Parse FSLogix Event Log

I’ve been doing more and more with Windows Virtual Desktop (WVD) lately. From building custom images with Azure Image Builder and putting custom software on it. But as always I come back to monitoring. In trying to create some KPIs for the environment, we decided we wanted to collect the FSLogix Event log. Collect FSLogix …

Read more

How to find Azure Log Analytics Keys

I’m redoing an old post on how to find Azure Log Analytics keys, because a lot has changed in both azure and Log Analytics since I wrote the last post. If you came here from that post or found via your favorite search engine, you’re now in the right place. Your Log Analytics keys are …

Read more

Azure Monitor Community

Last week the Azure Monitor team announced a new Community for Workbooks, queries and alerts for Azure Monitor. Hopefully it becomes to Azure Operations as what the Azure Sentinel Community has become. Despite being around a lot less time than Azure Monitor, there are many workbooks, queries, Jupyter Notebooks for use in the Azure Sentinel …

Read more

Azure Monitor SQL Insights Workbook

Today I have a workbook long in the making. This workbook is for Azure SQL DBs, SQL DW and Elastic Pool servers. This is my most in depth Azure Monitor workbook to date and brings in Metrics and Logs in from across your Azure SQL resources. I’ve said a few times on twitter that if …

Read more

Azure Monitor Change Tracking Workbook

I’m back again, with another workbook. This time for Azure Automation Change Tracking solution for Azure Monitor. If you’ve read my blog at all, you know Change Tracking is one of my favorite solutions for Azure Monitor. You can track your services, as well as registry and software and files, on both Linux and Windows. …

Read more

Log Analytics Operators Has, Contains and In

Recently Log Analytics added a neat feature that allows you to see how well your queries run. Because Log Analytics Operators Has and Contains perform similar functions, some have been advising to only use the Has operator as it is the most efficient. However, Has is nice but it is not the be all and …

Read more

Azure Monitor, Sentinel QuickStart Workbook templates

If you’ve followed me at all over the last few years, I make a lot of workbooks. I have a number of them on my github. I have these workbooks for your usage, completely free. LogicApps/Azure Sentinel Playbooks Azure Automation Update Management Azure File Sync Syslog Windows Event Log But now I’m putting out the …

Read more