Inventory and data collection details for monitoring solutions in Azure

Monitoring solutions leverage services in Azure to provide additional insight into the operation of a particular application or service. Monitoring solutions typically collect log data and provide queries and views to analyze collected data. You can add monitoring solutions to Azure Monitor for any applications and services that you use. They are typically available at no cost but collect data that could invoke usage charges.

This article includes a list of montioring solutions available from Microsoft with links to their detailed documentation. It also provides information on their method and frequency of data collection into Azure Monitor. You can use the information in this article to identify the different solutions available and to understand the data flow and connection requirements for different monitoring solutions.

Note

This article was recently updated to use the term Azure Monitor logs instead of Log Analytics. Log data is still stored in a Log Analytics workspace and is still collected and analyzed by the same Log Analytics service. We are updating the terminology to better reflect the role of logs in Azure Monitor. See Azure Monitor terminology changes for details.

List of monitoring solutions

The following table lists the monitoring solutions in Azure provided by Microsoft. An entry in the column means that the solution collects data into Azure Monitor using that method. If a solution has no columns selected, then it writes directly to Azure Monitor from another Azure service. Follow the link for each one to its detailed documentation for more information.

Explanations of the columns are as follows:

  • Microsoft monitoring agent - Agent used on Windows and Linux to run managements pack from SCOM and monitoring solutions from Azure. In this configuration, the agent is connected directly to Azure Monitor without being connected to an Operations Manager management group.
  • Operations Manager - Identical agent as Microsoft monitoring agent. In this configuration, it's connected to an Operations Manager management group that's connected to Azure Monitor.
  • Azure Storage - Solution collects data from an Azure storage account.
  • Operations Manager required? - A connected Operations Manager management group is required for data collection by the monitoring solution.
  • Operations Manager agent data sent via management group - If the agent is connected to a SCOM management group, then data is sent to Azure Monitor from the management server. In this case, the agent doesn't need to connect directly to Azure Monitor. If this box isn't selected, then data is sent from the agent directly to Azure Monitor even if the agent is connected to a SCOM management group. It will need to be able to communicate to Azure Monitor through the Log Analytics gateway.
  • Collection frequency - Specifies the frequency that data is collected by the monitoring solution.
Monitoring solution Platform Microsoft monitoring agent Operations Manager agent Azure storage Operations Manager required? Operations Manager agent data sent via management group Collection frequency
Activity Log analytics Azure on notification
AD Assessment Windows 7 days
AD Replication Status Windows 5 days
Agent Health Windows and Linux 1 minute
Alert Management (Nagios) Linux on arrival
Alert Management (Zabbix) Linux 1 minute
Alert Management (Operations Manager) Windows 3 minutes
Azure Site Recovery Azure n/a
Application Insights Connector (Deprecated) Azure on notification
Automation Hybrid Worker Windows n/a
Azure Application Gateway Analytics Azure on notification
Monitoring solution Platform Microsoft monitoring agent Operations Manager agent Azure storage Operations Manager required? Operations Manager agent data sent via management group Collection frequency
Azure Network Security Group Analytics (Deprecated) Azure on notification
Azure SQL Analytics (Preview) Windows 1 minute
Backup Azure on notification
Capacity and Performance (Preview) Windows on arrival
Change Tracking Windows varies
Change Tracking Linux varies
Containers Windows and Linux 3 minutes
Key Vault Analytics Windows on notification
Malware Assessment Windows hourly
Network Performance Monitor Windows TCP handshakes every 5 seconds, data sent every 3 minutes
Office 365 Analytics (Preview) Windows on notification
Monitoring solution Platform Microsoft monitoring agent Operations Manager agent Azure storage Operations Manager required? Operations Manager agent data sent via management group Collection frequency
Service Fabric Analytics Windows 5 minutes
Service Map Windows and Linux 15 seconds
SQL Assessment Windows 7 days
SurfaceHub Windows on arrival
System Center Operations Manager Assessment (Preview) Windows seven days
Update Management Windows at least 2 times per day and 15 minutes after installing an update
Upgrade Readiness Windows 2 days
VMware Monitoring (Deprecated) Linux 3 minutes
Wire Data 2.0 (Preview) Windows (2012 R2 / 8.1 or later) 1 minute

Next steps