Azure Monitor automatically collects platform metrics, which include performance data and network security events. These metrics are defined for each namespace, stored in the time-series metrics database, and are lightweight to support near real-time alerting. They track the performance of resources over time, providing insights into the availability and resilience of your system.
Although platform metrics are collected automatically, you can route some of these metrics to Azure Monitor Logs or Log Analytics for more detailed queries and analyses. This routing can be configured through diagnostic settings for each service, allowing integration with other log data.
To ensure data is being correctly collected:
Azure Monitor allows you to analyze metrics using Metrics Explorer, a tool within the Azure portal. It supports various aggregation types—sum, maximum, minimum, average, and count—to help visualize and understand data trends. For example:
Use Azure Monitor to set up alerts based on these metrics. This enables proactive monitoring and automated responses to potential issues. Alerts can be configured to notify when specific thresholds are breached or certain patterns are detected, ensuring timely intervention.
To refine ingested telemetry, employ filters and transformations through Azure Monitor. This process involves defining data collection rules to specify which network security logs and performance counters should be monitored. Using data collection rules ensures the integrity of your data pipelines and allows for comprehensive security monitoring.
Are you a guardian of your domain? Lean how to leverage your aptitude in security to protect Microsoft Azure technologies, with a goal of earning the Microsoft Certified: Azure Security Engineer Associate certification!
Prepare and test your skills

Prepare and test your skills

Azure Monitor automatically collects platform metrics, which include performance data and network security events. These metrics are defined for each namespace, stored in a time-series database, and are lightweight to support near real-time alerting.
You can verify the Azure Monitor Agent is running by searching for heartbeat signals from the virtual machine through Microsoft Sentinel or Azure Monitor. Additionally, you should check for records in the Syslog table within your Log Analytics workspace.
Azure Monitor provides Metrics Explorer, a tool within the Azure portal, to analyze metrics. Metrics Explorer supports aggregation types such as sum, maximum, minimum, average, and count to help visualize data trends.
You can route platform metrics to Azure Monitor Logs or Log Analytics by configuring diagnostic settings for each service. This routing allows the metrics to be integrated with other log data for more detailed queries and analyses.