Log Analytics Heartbeat Table

The Heartbeat table in Log Analytics is surprisingly useful for a number of things. First at its base level, it acts as an inventory of your VMs. The table contains a number of useful columns from Solutions a VM is scoped to, Os Type and versions to what resource group they are in. In this …

Read more

Azure Monitor: Management Tips from the Field

Since I’ve started working in Azure full time for the last few years I’ve now seen a number of environments. This post will outline my Azure Monitor Management Tips to make your life easier. And how you should set it up depending on your needs. Given my focus has largely been on Monitoring, these tips …

Read more

The Curious Capabilities of Case Scalar Function

Have you checked out the Case scalar function? If not this post is all about what the capabilities of Case scalar function are. However, as I mentioned previously, there is a lot of good documentation around Kusto, and then there are others that could use more documentation, this is one of those examples. From the …

Read more

Azure Automation Update Management Workbook

Are you using Azure Automation Update Management? If not why not? It’s free for your Azure VMs. You can also use the Log Analytics portion by itself to track Update status. That said, the default dashboards are just OK, but are impossible to use with multiple subscriptions. Especially if you have multiple Log Analytics workspaces …

Read more

Working with Time in Log Analytics

Inside Log Analytics and therefore many other products that use Kusto, we have many options to play with time.  In this post I’ll show real world examples when working with time in Log Analytics. In particular how to use Timespans, Datetime and Time Difference in Kusto. For the purposes of this post all examples will …

Read more