Kusto Evaluate Operator and its Plugins

The evaluate operator is fantastic tool in your Kusto tool belt. So much so that I have requested several times that it get added to Azure Resource Graph. However, the Evaluate Operator itself won’t run anything. You have to add one of its Plugins behind it. In this post I’ll show you how to use …

Read more

How to Import Azure Monitor, Sentinel Workbooks

A common request I get is how to import one of my Azure Monitor Workbooks into Azure. In this post I’ll show you several ways to import them. Here are some of my Workbooks you can import. Ultimate Azure Inventory Azure SQL LogicApps/Azure Sentinel Playbooks Azure Automation Update Management Azure File Sync Syslog Windows Event …

Read more

Windows Virtual Desktop (WVD) Azure Monitor Workbook

Today I’ve got another Azure Monitor Workbook, this time for Windows Virtual Desktop (WVD). This workbook uses exclusively Log Analytics data IaaS data, so it will work with both WVD 1.0 and 2.0. Though there are some nice logs available in the diagnostic settings for WVD 2.0. If this is your first time on my …

Read more

Calculate WVD Profile Load Time

In my previous post I showed you how to collect and parse the FSLogix event log with Log Analytics. In this post I will show you how to use that event log to calculate WVD profile load time. Calculating logon time is one of those things that can provide value into our users experience. And …

Read more

Collect and Parse FSLogix Event Log

I’ve been doing more and more with Windows Virtual Desktop (WVD) lately. From building custom images with Azure Image Builder and putting custom software on it. But as always I come back to monitoring. In trying to create some KPIs for the environment, we decided we wanted to collect the FSLogix Event log. Collect FSLogix …

Read more

How to find Azure Log Analytics Keys

I’m redoing an old post on how to find Azure Log Analytics keys, because a lot has changed in both azure and Log Analytics since I wrote the last post. If you came here from that post or found via your favorite search engine, you’re now in the right place. Your Log Analytics keys are …

Read more

Azure Monitor Community

Last week the Azure Monitor team announced a new Community for Workbooks, queries and alerts for Azure Monitor. Hopefully it becomes to Azure Operations as what the Azure Sentinel Community has become. Despite being around a lot less time than Azure Monitor, there are many workbooks, queries, Jupyter Notebooks for use in the Azure Sentinel …

Read more