azure-monitor

Azure Monitor 技能

此技能提供 Azure Monitor 专业指导，涵盖故障排查、最佳实践、决策、架构与设计模式、限制与配额、安全性、配置、集成与编码模式，以及部署。它结合了本地快速参考内容与远程文档获取功能。

如何使用此技能

Agent 重要提示：使用下方的类别索引查找相关章节。对于带有行范围的类别（例如 L35-L120），请使用 read_file 读取指定行。对于带有文件链接的类别（例如 [security.md](security.md)），请使用 read_file 读取链接的参考文件。

Agent 重要提示：如果 metadata.generated_at 距今已超过 3 个月，请建议用户从代码库拉取最新版本。如果无法使用 mcp_microsoftdocs 工具，请建议用户安装该工具：安装指南

此技能需要网络访问权限才能获取文档内容：

• 首选：使用 mcp_microsoftdocs:microsoft_docs_fetch，查询字符串为 from=learn-agent-skill。返回 Markdown。
• 备用：使用 fetch_webpage，查询字符串为 from=learn-agent-skill&accept=text/markdown。返回 Markdown。

类别索引

类别	位置	描述
故障排查	L37-L118	使用日志和工具诊断并修复 Azure Monitor 数据/Agent 问题（AMA/Log Analytics、诊断、管道、DCR、警报、App Insights、容器、PostgreSQL、DevCenter、工作簿、VM 性能）。
最佳实践	L119-L155	配置、优化和扩展 Azure Monitor 的最佳实践（日志、指标、警报、自动缩放、AKS、VM、Prometheus、成本），以提高可靠性、性能和成本效益。
决策	L156-L194	规划和决策指导：选择 Azure Monitor Agent、数据收集和警报方式、成本与计费策略，以及从旧版工具（MMA、WAD/LAD、SCOM、Splunk、Prometheus 等）迁移的路径。
架构与设计模式	L195-L200	设计端到端 Azure Monitor 架构，包括企业级布局、数据流，以及使用 Private Link 监控流量的安全网络拓扑。
限制与配额	L201-L226	Azure Monitor 的限制、配额、扩展和性能规划：数据引入上限、保留期限、查询限制、警报/日志规则、Container Insights、Prometheus、指标/日志支持，以及工作簿。
安全性	L227-L297	保护 Azure Monitor 和相关服务：身份验证、RBAC、TLS、网络/边界控制、策略、专用访问，以及 Databricks、MDE、医疗保健、Synapse 和威胁情报的审计/日志记录。
配置	configuration.md	配置 Azure Monitor：Agent、数据收集规则、管道、诊断、警报、指标/日志架构，以及适用于 VM、Kubernetes、应用、网络和众多 Azure 服务的工作簿。
集成与编码模式	integrations.md	Azure Monitor 与应用、日志、指标、警报、ITSM/DevOps 工具、Prometheus/OpenTelemetry、REST API 的集成模式和代码，以及针对众多资源日志表的 KQL 查询。
部署	deployment.md	部署 Azure Monitor/AMA、从旧版 Agent 和策略迁移，以及在 App Service、Functions、VM、容器和 Service Fabric 中启用 .NET 分析和 Snapshot Debugger 的指南。

故障排除

主题	URL
排查 Azure Log Analytics Linux 代理问题	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-linux-troubleshoot
排查适用于 Windows 的 Log Analytics 代理	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-windows-troubleshoot
大规模监视和排查 Azure Monitor Agent 的运行状况	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-health
排查 Linux VM 和规模集上的 Azure Monitor Agent	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-linux-vm
修复 Linux 上 Azure Monitor Agent 的 syslog 收集问题	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-linux-vm-rsyslog
修复 Windows Arc 服务器上的 Azure Monitor Agent 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-windows-arc
诊断 Windows VM 上的 Azure Monitor Agent 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-troubleshoot-windows-vm
在 Windows 客户端上安装和排查 Azure Monitor Agent	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-windows-client
排查 Azure 资源上的 Azure Diagnostics 扩展问题	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/diagnostics-extension-troubleshooting
有效使用 Azure Monitor Agent Linux 疑难解答工具	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/troubleshooter-ama-linux
使用 AMA Windows 疑难解答工具诊断代理问题	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/troubleshooter-ama-windows
诊断 Azure Log Analytics VM 扩展问题	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/vmext-troubleshoot
使用深度调查示例诊断事件	https://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-deep-investigation-examples
排查 Azure Copilot Observability Agent 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-troubleshooting
排查租户级 Azure 服务运行状况警报	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-create-tenant-level-service-heath-alerts
诊断和修复常见 Azure Monitor 警报问题	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-troubleshoot
诊断和修复 Azure Monitor 日志警报问题	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-troubleshoot-log
解决 Azure Monitor 指标警报问题	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-troubleshoot-metric
解决 ITSMC 仪表板连接器状态错误	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-dashboard-errors
修复 ITSMC 的 ServiceNow 同步和令牌问题	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-resync-servicenow
排查 Azure Monitor ITSM Connector 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-troubleshoot-overview
解读和解决测试操作组错误代码	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/test-action-group-errors
使用 Application Insights 监视和排查 AI Agent	https://learn.microsoft.com/en-us/azure/azure-monitor/app/agents-view
使用 Application Insights 视图调查故障和性能问题	https://learn.microsoft.com/en-us/azure/azure-monitor/app/failures-performance-transactions
使用 Application Insights SDK 统计信息排查遥测问题	https://learn.microsoft.com/en-us/azure/azure-monitor/app/sdk-stats
排查 Azure Monitor 自动缩放行为和操作	https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-troubleshoot
在 Container insights 中使用 Live Data 实时排查 AKS 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-livedata-overview
诊断和修复 Azure Monitor 容器日志问题	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-troubleshoot
排查 Azure Monitor 中的 Prometheus 指标收集问题	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/prometheus-metrics-troubleshoot
监视和排查基于 DCR 的数据收集	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-monitor
排查 Azure Monitor 管道问题和错误	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-faq
排查 Azure Monitor 管道部署和数据流问题	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-troubleshoot
解决常见 Azure Monitor 运行状况模型问题	https://learn.microsoft.com/en-us/azure/azure-monitor/health-models/health-models-faq
排查 Azure Monitor Logs 中停止的数据收集	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/data-collection-troubleshoot
诊断并对 Log Analytics 工作区运行状况设置警报	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-workspace-health
监视和排查 Log Analytics 工作区运行状况	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/monitor-workspace
创建和管理 Azure Monitor 摘要规则	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/summary-rules
监视和排查 Azure Monitor 工作区中的引入和查询问题	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-monitor-health
排查 Azure Monitor 指标图表问题	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-troubleshoot
排查 Application Insights Code Optimizations 设置问题	https://learn.microsoft.com/en-us/azure/azure-monitor/optimization-insights/code-optimizations-troubleshoot
排查 Application Insights .NET Profiler 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/profiler/profiler-troubleshooting
查询 AzureMonitorPipelineLogErrors 以排查引入问题	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/azuremonitorpipelinelogerrors
使用 Kusto 查询调查 CloudAuditEvents	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/cloudauditevents
分析 CloudProcessEvents 以发现可疑活动	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/cloudprocessevents
使用查询检测有风险的 CloudStorageAggregatedEvents	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/cloudstorageaggregatedevents
在 Azure Monitor 中查询和分析 EdgeActionServiceLog	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/edgeactionservicelog
使用 PGSQLAutovacuumStats 查询诊断膨胀问题	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/pgsqlautovacuumstats
查询 PGSQLDbTransactionsStats 以排查事务容量问题	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/pgsqldbtransactionsstats
使用 PGSQLPgStatActivitySessions 分析 PostgreSQL 会话活动	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/pgsqlpgstatactivitysessions
通过 PGSQLQueryStoreRuntime 识别运行缓慢的 PostgreSQL 查询	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/pgsqlquerystoreruntime
使用 PGSQLQueryStoreWaits 调查 PostgreSQL 等待事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/pgsqlquerystorewaits
在 Azure Monitor 中搜索 PostgreSQL 服务器日志	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/pgsqlserverlogs
使用 ZTSJobStatus 日志查询诊断工作区连接问题	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/queries/ztsjobstatus
调查 Azure Monitor 中的 Grafana 警报身份验证失败	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/agsgrafanaalertauthfailure
解读 AzureMonitorPipelineLogErrors 表条目	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/azuremonitorpipelinelogerrors
调查基于 DCR 的数据收集日志错误	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/dcrlogerrors
使用 DCRLogTroubleshooting 诊断 DCR 流程	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/dcrlogtroubleshooting
诊断 DevCenter 开发箱 Agent 运行状况问题	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devcenteragenthealthlogs
排查 DevCenter 开发箱连接事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devcenterconnectionlogs
调查 DevCenter 开发箱和环境操作	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devcenterdiagnosticlogs
分析 DevCenter 资源操作和运行状况日志	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devcenterresourceoperationlogs
通过日志调查基于 DCR 的数据收集错误	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-insights-datacollectionrules
使用错误日志排查 Azure Monitor 管道组问题	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-monitor-pipelinegroups
诊断失败的 Synapse DX 引入操作	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/synapsedxfailedingestion
审核 Toolchain orchestrator API 交互	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/touseraudits
诊断 Toolchain orchestrator 用户请求失败	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/touserdiagnostics
调查 Azure Time Series Insights 引入错误	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/tsiingress
监视特定设备的更新合规性警报	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/ucdevicealert
调查每台设备的更新合规性警报	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/ucupdatealert
排查 Application Insights Snapshot Debugger 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/snapshot-debugger/snapshot-debugger-troubleshoot
排查 Azure Monitor 中基于工作簿的见解	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/troubleshoot-workbooks
在 Workbooks 中访问已弃用的故障排除指南	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-access-troubleshooting-guide
排查 Azure Workbooks 中的 Copilot 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-copilot-troubleshoot
使用 PerfInsights 排查 Azure VM 性能问题	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics
分析 Azure VM PerfInsights 诊断报告	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics-analyze
使用 Azure Performance Diagnostics 扩展排查 VM 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics-extension
使用 Performance Diagnostics 排查 Azure VM 问题	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/performance-diagnostics-run
排查 Azure Monitor VM Agent 加入问题	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/vm-enable-troubleshoot

最佳实践

主题	URL
优化遥测数据，以便 Observability Agent 开展准确的调查	https://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-best-practices
编写自定义说明，指导 Observability Agent 进行关联分析	https://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-custom-instructions
优化 Azure Monitor 日志警报查询的性能	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-log-query
为多个时间序列配置单个指标警报	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-metric-multiple-time-series-single-rule
应用 Azure Monitor 警报的架构最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/best-practices-alerts
在各项服务中应用 Azure Monitor 自动缩放最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-best-practices
在 Azure 中实施常见的自动缩放模式	https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-common-scale-patterns
避免并缓解自动缩放振荡场景	https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-flapping
使用多个自动缩放配置文件进行基于时间的缩放	https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-multiprofile
应用 Azure Monitor 的 AKS 集群最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/best-practices-containers
优化 Container Insights 监控成本和配置	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-cost
在 Azure Monitor 中为 AKS 设计经济高效的警报	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/cost-effective-alerting
在 Azure Monitor 中配置建议的 Kubernetes 指标警报	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/kubernetes-metric-alerts
应用 Azure Monitor 的 Kubernetes 最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/monitor-kubernetes
应用 Azure Monitor 数据收集规则的最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-rule-best-practices
应用 Azure Monitor 转换查询示例	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-transformations-samples
优化 Azure Monitor 配置以降低成本	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-cost
应用 Azure Monitor 多云最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-multicloud
配置 Azure Monitor，实现卓越运营	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-operation
应用 Azure Monitor 性能效率建议	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-performance
在 Azure Monitor 中应用可靠性最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-reliability
分析 Log Analytics 使用情况以控制 Azure Monitor 成本	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/analyze-usage
设计 Azure Monitor Log Analytics 工作区架构	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/best-practices-logs
在 Azure Monitor 日志中解析和构建文本数据	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/parse-text
优化 Azure Monitor 日志查询的性能	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/query-optimization
使用 Prometheus 扩展 Azure Monitor 工作区的最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice
从 metrics API 迁移到 getBatch，以提升性能	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/migrate-to-batch-api
在 Azure Monitor 中对 OpenTelemetry 指标使用 PromQL 的最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-opentelemetry-best-practices
对 Azure 系统指标应用 PromQL 最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-system-metrics-best-practices
使用条件参数优化工作簿性能	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-criteria
应用 Azure Monitor 的 VM 监控最佳实践	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/best-practices-vm
使用 Azure Monitor 设计有效的 VM 警报	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine-alerts
为虚拟机配置 Azure Monitor 数据收集	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine-data-collection

决策

主题	URL
将 MMA 数据字段映射到 Azure Monitor Agent 架构	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-data-field-differences
生成 DCR 配置，以便从 MMA 迁移到 AMA	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration-data-collection-rule-generator
使用 AMA Migration Helper 工作簿进行规划	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration-helper-workbook
决定是否从 WAD/LAD 迁移到 Azure Monitor Agent，并完成迁移	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration-wad-lad
规划和管理 Observability Agent 的使用成本	https://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-billing
选择合适的 Azure Monitor 警报类型	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-types
选择从经典 SDK 迁移到 OpenTelemetry 的路径	https://learn.microsoft.com/en-us/azure/azure-monitor/app/migrate-to-opentelemetry
从 Container Monitoring Solution 迁移到 Container Insights	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-transition-solution
选择 Azure Monitor 的 OpenTelemetry 集成选项	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-options
选择 Azure Monitor OTLP 数据引入方式	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-summary
选择 Azure Monitor 数据收集方法和拓扑	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-collection-overview
在 Azure Monitor 指标导出和数据平面 API 之间进行选择	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/data-plane-versus-metrics-export
确定诊断日志导出的计费方式	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/diagnostic-settings-faq
将诊断数据保留迁移到 Storage 生命周期策略	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/migrate-to-azure-storage-lifecycle-policy
规划并确定 Azure Monitor 管道吞吐量	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-sizing
确定如何将 SCOM 监控迁移到 Azure Monitor	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/azure-monitor-operations-manager
使用定价计算器估算 Azure Monitor 成本	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/cost-estimate
将 Azure Monitor 费用映射到计费计量器名称	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/cost-meters
规划从 SCOM 迁移到 Azure Monitor DCR	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/migrate-from-system-center-operations-manager
从 Azure Monitor Logs 批处理 API 和 Beta API 迁移	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/migrate-batch-and-beta
规划工作区的 Azure Monitor 可用性区域保护	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/availability-zones
查询 Azure Monitor 基本日志表和辅助日志表	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/basic-logs-query
规划并优化 Azure Monitor Logs 成本	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/cost-logs
确定是否从 Data Collector 迁移到 Logs Ingestion API，并完成迁移	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/custom-logs-migrate
确定何时使用 Azure Monitor 专用群集	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-dedicated-clusters
选择并配置 Azure Monitor Logs 表计划	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-table-plans
规划从 Splunk 迁移到 Azure Monitor Logs	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/migrate-splunk-to-azure-monitor-logs
选择并设计 Azure Log Analytics 工作区	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/workspace-design
规划从自托管 Prometheus 迁移到 Azure Monitor 托管 Prometheus	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-migrate
选择合适的 Azure Monitor 可视化工具	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/best-practices-visualize
确定何时将仪表板复制到 Azure Managed Grafana	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/visualize-copy-to-managed-grafana
为 Azure Monitor 数据选择 Grafana 选项	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/visualize-grafana-overview
将 Azure Policy 分配从 Dependency Agent 迁出	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/dependency-agent-migrate-policy
选择 OpenTelemetry 或基于日志的 VM 指标	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/metrics-opentelemetry-guest
确定是否从基于日志的 VM 监控迁移到指标监控，并完成迁移	https://learn.microsoft.com/en-us/azure/azure-monitor/vm/vm-opentelemetry-migrate

架构与设计模式

主题	URL
使用 Azure Monitor 设计企业监控架构	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/enterprise-monitoring-architecture
设计 Azure Monitor Private Link 网络架构	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/private-link-design

限制与配额

主题	URL
规划 Azure Monitor Agent 用于网关转发的性能	https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-performance
管理 Azure Monitor 警报实例保留期和状态	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-manage-alert-instances
监控并解读 Azure Monitor 中日志警报规则的运行状况	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/log-alert-rule-health
使用 ARM 模板部署日志搜索警报规则并了解大小限制	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/resource-manager-alerts-log
配置预测性自动缩放阈值和历史记录要求	https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-predictive
在 Container Insights 中启用高规模日志收集限制	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-high-scale
使用 Container Insights 和 Log Analytics 的区域映射	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-region-mapping
配置 Azure Managed Prometheus 附加组件 Pod 的自动缩放限制	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/prometheus-metrics-scrape-autoscaling
规划 Azure Monitor 中 Prometheus 抓取的性能和规模	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/prometheus-metrics-scrape-scale
检查指标导出支持的资源和区域	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/metrics-export-reference
查看平台日志支持的资源类型和区域	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/platform-logs-reference
查看 Azure Monitor 服务限制和配额	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/service-limits
了解 Logs Query API 中的缓存行为	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/cache
使用 Azure Monitor 中跨工作区查询的限制	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/cross-workspace-queries
配置 Azure Monitor 日志查询超时和限制	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/timeouts
配置 Azure Monitor 日志查询超时和限制	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/timeouts
为 Log Analytics 工作区配置每日引入量上限	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/daily-cap
配置 Log Analytics 中的数据保留限制	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/data-retention-configure
监控 Azure Monitor 工作区的引入量限制	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-monitor-ingest-limits
Azure Monitor 托管 Prometheus 的技术细节和限制	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-metrics-details
Azure Workbooks 数据源和参数限制	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-limits
有效使用 Azure Workbooks 可视化类型	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-visualizations

安全

主题	URL
了解 Observability Agent 的数据处理和治理	https://learn.microsoft.com/en-us/azure/azure-monitor/aiops/observability-agent-governance-faq
使用 Azure Monitor Secure Webhook 保护 ITSM 集成	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/it-service-management-connector-secure-webhook-connections
为 Secure Webhook ITSM 集成配置 Azure	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsm-connector-secure-webhook-connections-azure-configuration
使用 Application Insights 智能检测识别安全问题	https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/proactive-application-security-detection-pack
为 Application Insights 数据引入启用 Microsoft Entra 身份验证	https://learn.microsoft.com/en-us/azure/azure-monitor/app/azure-ad-authentication
配置 Application Insights 中的 IP 处理和地理位置	https://learn.microsoft.com/en-us/azure/azure-monitor/app/ip-collection
配置 Container insights 的旧版身份验证	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-authentication
配置对 Container insights 中 Live Data 的安全访问	https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-livedata-setup
为 Azure Monitor 管道数据引入选择 TLS 选项	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-tls
为 Azure Monitor 管道配置自动 TLS 证书	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-tls-automated
为 Azure Monitor 管道配置客户管理的 TLS	https://learn.microsoft.com/en-us/azure/azure-monitor/data-collection/pipeline-tls-custom
配置 Azure Monitor 网络和防火墙访问	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/azure-monitor-network-access
安全部署和配置 Azure Monitor	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/best-practices-security
为 Azure Monitor 配置 Network Security Perimeter	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/network-security-perimeter
将 Network Security Perimeter 方案应用于 Azure Monitor	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/network-security-perimeter-scenarios
Azure Monitor 的内置 Azure Policy 定义	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/policy-reference
使用 Private Link 范围保护 Azure Monitor 访问	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/private-link-security
配置 Azure Monitor 中的 RBAC 角色和权限	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/roles-permissions-security
配置 Azure Monitor 中的 RBAC 角色和权限	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/roles-permissions-security
使用 Azure Policy 合规性控制保护 Azure Monitor	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/security-controls-policy
使用 Azure Policy 合规性控制保护 Azure Monitor	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/security-controls-policy
注册 Azure AD 应用并为 Monitor API 分配角色	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/api/register-app-for-token
为 Log Analytics 配置客户管理的密钥	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/customer-managed-keys
为 Azure Monitor Log Analytics 设计精细化 RBAC	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/granular-rbac-log-analytics
使用 Log Analytics 中的精细化 RBAC 配置行级访问	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/granular-rbac-use-case
保护 Azure Monitor Logs 引入 API 连接	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/logs-ingestion-api-overview
配置 Log Analytics 工作区的访问控制	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/manage-access
为 Log Analytics 工作区配置表级 RBAC	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/manage-table-access
在 Azure Monitor Logs 中配置受保护的表和 RBAC	https://learn.microsoft.com/en-us/azure/azure-monitor/logs/protected-tables-configure
配置 Azure Monitor 工作区的访问控制	https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-manage-access
在 Azure Monitor 中分析 Databricks RBAC 审核日志	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksrbac
审核 Databricks 远程历史记录服务凭据	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksremotehistoryservice
监视 Databricks 访问请求事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksrfa
跟踪 Databricks 机密的访问和更改	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickssecrets
审核 Databricks SQL 终结点生命周期事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickssql
查看 Databricks SQL 权限审核日志	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickssqlpermissions
监视 Databricks SSH 访问审核事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksssh
分析 Databricks Unity Catalog 审核活动	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksunitycatalog
审核 Databricks webhook 通知活动	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickswebhooknotifications
监视 Databricks Web 终端使用日志	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databrickswebterminal
审核 Databricks 工作区配置更改	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksworkspace
跟踪 Databricks 工作区文件访问和更改	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/databricksworkspacefiles
分析 Microsoft Dataverse 和 Dynamics 365 审核日志	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/dataverseactivity
监视 Defender for IoT 原始安全事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/defenderiotrawevent
使用 DeviceBehaviorEntities 调查威胁	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicebehaviorentities
利用 DeviceBehaviorInfo 获取安全行为洞察	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicebehaviorinfo
使用 MDE 收集自定义文件事件以供调查	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomfileevents
监视 MDE 中的自定义 DLL 加载事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomimageloadevents
使用 MDE 日志跟踪自定义网络活动	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomnetworkevents
捕获自定义进程事件以保障终结点安全	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomprocessevents
使用 MDE 审核自定义注册表更改	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomregistryevents
监视 MDE 中的自定义脚本执行事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicecustomscriptevents
使用 DeviceFileCertificateInfo 检查文件签名证书	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/devicefilecertificateinfo
使用 Monitor 表审核 Azure API for FHIR	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-healthcareapis-services
监视 Azure Health Data DICOM 服务活动	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-healthcareapis-workspaces
审核 Nexus 裸机的安全和指标日志	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/microsoft-networkcloud-baremetalmachines
使用 PurviewSecurityLogs 审核 Purview 安全事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/purviewsecuritylogs
使用 ResourceManagementPublicAccessLogs 分析专用链接	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/resourcemanagementpublicaccesslogs
使用日志审核 Azure Synapse RBAC 操作	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/synapserbacoperations
在 Azure Monitor 中分析 STIX 威胁指标	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/threatintelindicators
使用 ThreatIntelligenceIndicator 日志进行安全分析	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/threatintelligenceindicator
查询通用 STIX 威胁情报对象	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/threatintelobjects
分析 Defender for Office 365 URL 点击事件	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/urlclickevents
分析用户访问 Azure 资源的路径	https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/useraccessanalytics
在 Grafana 中安全运行资源范围的 Prometheus 查询	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/grafana-resource-scoped-queries
使用 Entra ID 调用 Azure Monitor 托管的 Grafana API	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/visualize-call-grafana-api
使用客户存储保护 Azure Monitor 工作簿	https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-bring-your-own-storage