Events
Mar 17, 11 PM - Mar 21, 11 PM
Join the meetup series to build scalable AI solutions based on real-world use cases with fellow developers and experts.
Register nowThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Azure Monitor managed service for Prometheus and Container Insights work together for complete monitoring of your Kubernetes environment. This article describes both features and the data they collect.
Important
Container Insights collects metric data from your cluster in addition to logs. This functionality is replaced by Azure Monitor managed service for Prometheus. You can analyze that data using built-in dashboards in Managed Grafana and alert on them using prebuilt Prometheus alert rules.
You can continue to have Container Insights collect metric data so you can use the Container Insights monitoring experience. Or you can save cost by disabling this collection and using Grafana for metric analysis. See Configure data collection in Container Insights using data collection rule for configuration options.
Container Insights sends data to a Log Analytics workspace where you can analyze it using different features of Azure Monitor. Managed Prometheus sends data to an Azure Monitor workspace, allowing Managed Grafana to access it. See Monitoring data for further details on this data.
Container Insights supports the following environments:
Note
Container Insights supports ARM64 nodes on AKS. See Cluster requirements for the details of Azure Arc-enabled clusters that support ARM64 nodes.
Container Insights support for Windows Server 2022 operating system is in public preview.
Access Container Insights in the Azure portal from Containers in the Monitor menu or directly from the selected AKS cluster by selecting Insights. The Azure Monitor menu gives you the global perspective of all the containers that are deployed and monitored. This information allows you to search and filter across your subscriptions and resource groups. You can then drill into Container Insights from the selected container. Access Container Insights for a particular cluster from its page in the Azure portal.
Container Insights and Managed Prometheus rely on a containerized Azure Monitor agent for Linux. This specialized agent collects performance and event data from all nodes in the cluster. The agent is deployed and registered with the specified workspaces during deployment. When you enable Container Insights on a cluster, a Data collection rule (DCR) is created. This DCR, named MSCI-<cluster-region>-<cluster-name>
, contains the definition of data that the Azure Monitor agent should collect.
Since March 1, 2023 Container Insights uses a Semver compliant agent version. The agent version is mcr.microsoft.com/azuremonitor/containerinsights/ciprod:3.1.4 or later. When a new version of the agent is released, it's automatically upgraded on your managed Kubernetes clusters that are hosted on AKS. To track which versions are released, see Agent release announcements.
When Container Insights doesn't use managed identity authentication, it relies on a containerized Log Analytics agent for Linux. The agent version is microsoft/oms:ciprod04202018 or later. When a new version of the agent is released, it's automatically upgraded on your managed Kubernetes clusters that are hosted on AKS. To track which versions are released, see Agent release announcements.
With the general availability of Windows Server support for AKS, an AKS cluster with Windows Server nodes has a preview agent installed as a daemon set pod on each individual Windows Server node to collect logs and forward them to Log Analytics. For performance metrics, a Linux node is automatically deployed in the cluster as part of the standard deployment collects and forwards the data to Azure Monitor for all Windows nodes in the cluster.
This section provides answers to common questions.
Is there support for collecting Kubernetes audit logs for ARO clusters? No. Container Insights don't support collection of Kubernetes audit logs.
Does Container Insights support pod sandboxing? Yes, Container Insights supports pod sandboxing through support for Kata Containers. See Pod Sandboxing (preview) with Azure Kubernetes Service (AKS).
Is it possible for a single AKS cluster to use multiple Log Analytics workspaces in Container Insights? No. Container Insights only accepts one Log Analytics Workspace in Container Insights for each AKS cluster.
Events
Mar 17, 11 PM - Mar 21, 11 PM
Join the meetup series to build scalable AI solutions based on real-world use cases with fellow developers and experts.
Register nowTraining
Learning path
Deploy, manage, and monitor Windows containers on Azure Kubernetes Service learning path - Training
Learn how to deploy, manage, monitor, and operate Windows containers on Azure Kubernetes Service and AKS Hybrid by examining the core principles of Windows containers and Kubernetes.
Certification
Microsoft Certified: Azure Administrator Associate - Certifications
Demonstrate key skills to configure, manage, secure, and administer key professional functions in Microsoft Azure.