Tutorial: Monitor a hybrid machine with VM insights

Azure Monitor can collect data directly from your hybrid machines into a Log Analytics workspace for detailed analysis and correlation. Typically this would entail installing the Log Analytics agent on the machine using a script, manually, or automated method following your configuration management standards. Azure Arc-enabled servers recently introduced support to install the Log Analytics and Dependency agent VM extensions for Windows and Linux, enabling VM insights to collect data from your non-Azure VMs.

This tutorial shows you how to configure and collect data from your Linux or Windows machines by enabling VM insights following a simplified set of steps, which streamlines the experience and takes a shorter amount of time.


  • If you don't have an Azure subscription, create a free account before you begin.

  • VM extension functionality is available only in the list of supported regions.

  • See Supported operating systems to ensure that the servers operating system you're enabling is supported by VM insights.

  • Review firewall requirements for the Log Analytics agent provided in the Log Analytics agent overview. The VM insights Map Dependency agent doesn't transmit any data itself, and it doesn't require any changes to firewalls or ports.

Sign in to Azure portal

Sign in to the Azure portal.

Enable VM insights

  1. Launch the Azure Arc service in the Azure portal by clicking All services, then searching for and selecting Machines - Azure Arc.

    Search for Azure Arc-enabled servers in All Services

  2. On the Machines - Azure Arc page, select the connected machine you created in the quickstart article.

  3. From the left-pane under the Monitoring section, select Insights and then Enable.

    Select Insights option from left-hand menu

  4. On the Azure Monitor Insights Onboarding page, you are prompted to create a workspace. For this tutorial, we don't recommend you select an existing Log Analytics workspace if you have one already. Select the default, which is a workspace with a unique name in the same region as your registered connected machine. This workspace is created and configured for you.

    Enable VM insights page

  5. You receive status messages while the configuration is performed. This process takes a few minutes as extensions are installed on your connected machine.

    Enable VM insights progress status message

    When it's complete, you get a message that the machine has been successfully onboarded and the insight has been successfully deployed.

View data collected

After the deployment and configuration is completed, select Insights, and then select the Performance tab. On the Performance tab, it shows a select group of performance counters collected from the guest operating system of your machine. Scroll down to view more counters, and move the mouse over a graph to view average and percentiles taken starting from the time when the Log Analytics VM extension was installed on the machine.

VM insights Performance charts for selected machine

Select Map to open the maps feature, which shows the processes running on the machine and their dependencies. Select Properties to open the property pane if it isn't already open.

VM insights Map for selected machine

Expand the processes for your machine. Select one of the processes to view its details and to highlight its dependencies.

Select your machine again and then select Log Events. You see a list of tables that are stored in the Log Analytics workspace for the machine. This list will be different depending whether you're using a Windows or Linux machine. Select the Event table. The Event table includes all events from the Windows event log. Log Analytics opens with a simple query to retrieve collected event log entries.

Next steps

To learn more about Azure Monitor, look at the following article: