mcpField
A
azure-observability

azure-observability

Official
github.com/microsoftData & databases1.6k98.2k installsUpdated today
Repository

About azure-observability

azure-observability is a skill for Azure monitoring and troubleshooting, aimed at operators and developers who need metrics, application performance, logs, and alerts. It brings together MCP tools and CLI usage for Azure Monitor, Application Insights, Log Analytics, Alerts, and Workbooks, with common KQL examples.

Key features

  1. 01Query metrics and logs
  2. 02Inspect application performance and traces
  3. 03Query logs with KQL
  4. 04Work with alerts and interactive reports
  5. 05Use common monitoring strategies

Use cases

  1. 01Investigate application exceptions and failed requests
  2. 02Analyze response times and dependencies
  3. 03Check infrastructure metrics
  4. 04Query security audit logs

MCP support

When Azure MCP is enabled, the skill prefers its tools to query Azure Monitor metrics and logs, list Application Insights resources, and list Kusto clusters and run KQL queries.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/microsoft/azure-skills --skill azure-observability

After installing, type/azure-observabilityin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/
auth-best-practices.md
references/sdk/
azure-mgmt-applicationinsights-dotnet.md
azure-monitor-ingestion-java.md
azure-monitor-ingestion-py.md
azure-monitor-opentelemetry-exporter-py.md
azure-monitor-opentelemetry-py.md
azure-monitor-opentelemetry-ts.md
azure-monitor-query-java.md
azure-monitor-query-py.md

Details

From the project README

Azure Observability Services

Services

ServiceUse WhenMCP ToolsCLI
Azure MonitorMetrics, alerts, dashboardsazure__monitoraz monitor
Application InsightsAPM, distributed tracingazure__applicationinsightsaz monitor app-insights
Log AnalyticsLog queries, KQLazure__kustoaz monitor log-analytics
AlertsNotifications, actions-az monitor alert
WorkbooksInteractive reportsazure__workbooks-

MCP Server (Preferred)

When Azure MCP is enabled:

Monitor
  • azure__monitor with command monitor_metrics_query - Query metrics
  • azure__monitor with command monitor_logs_query - Query logs with KQL
Application Insights
  • azure__applicationinsights with command applicationinsights_component_list - List App Insights resources
Log Analytics
  • azure__kusto with command kusto_cluster_list - List clusters
  • azure__kusto with command kusto_query - Execute KQL queries

If Azure MCP is not enabled: Run /azure:setup or enable via /mcp.

CLI Reference

# List Log Analytics workspaces
az monitor log-analytics workspace list --output table

# Query logs with KQL
az monitor log-analytics query \
  --workspace WORKSPACE_ID \
  --analytics-query "AzureActivity | take 10"

# List Application Insights
az monitor app-insights component list --output table

# List alerts
az monitor alert list --output table

# Query metrics
az monitor metrics list \
  --resource RESOURCE_ID \
  --metric "Percentage CPU"

Common KQL Queries

// Recent errors
AppExceptions
| where TimeGenerated > ago(1h)
| project TimeGenerated, Message, StackTrace
| order by TimeGenerated desc

// Request performance
AppRequests
| where TimeGenerated > ago(1h)
| summarize avg(DurationMs), count() by Name
| order by avg_DurationMs desc

// Resource usage
AzureMetrics
| where TimeGenerated > ago(1h)
| where MetricName == "Percentage CPU"
| summarize avg(Average) by Resource

Monitoring Strategy

What to MonitorServiceMetric/Log
Application errorsApp InsightsExceptions, failed requests
PerformanceApp InsightsResponse time, dependencies
InfrastructureAzure MonitorCPU, memory, disk
SecurityLog AnalyticsSign-ins, audit logs
CostsCost ManagementBudget alerts

SDK Quick References

For programmatic access to monitoring services, see the condensed SDK guides:

Service Details

For deep documentation on specific services:

Comments

Markdown supported