Azure Monitor provides a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments.  - **Key Components**: - **Logs**: Collects and organizes data from monitored resources, enabling complex analysis through log queries. - **Metrics**: Captures numerical data from resources, stored in a time-organized database for near-real-time analysis. - **Data Sources**: - **Windows Events**: Logs from the Windows event logging system. - **Performance Counters**: Numerical values measuring performance aspects. - **Syslog**: Logs from the Linux event logging system. - **Text and JSON Logs**: Information sent to log files on local disks. - **IIS Logs**: Logs from Internet Information Service on Windows machines. - **Considerations**: - Define security boundaries with separate key vaults. - Implement access policies and least privilege access. - Enable firewall and virtual network service endpoints. - Use Metrics Explorer for interactive analysis of collected data. [[Log Analytics Workspace]] ## Resources [Design for Azure Monitor data sources - Training | Microsoft Learn](https://learn.microsoft.com/en-us/training/modules/design-solution-to-log-monitor-azure-resources/2-design-for-azure-monitor-data-sources) [Azure Monitor data sources and data collection methods - Azure Monitor | Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/data-sources) [Collect workload performance data - Microsoft Azure Well-Architected Framework | Microsoft Learn](https://learn.microsoft.com/en-us/azure/well-architected/performance-efficiency/collect-performance-data) [Design a full-stack monitoring strategy on Azure - Training | Microsoft Learn](https://learn.microsoft.com/en-us/training/modules/design-monitoring-strategy-on-azure/)