Azure Monitor SQL Insights Workbook

Today I have a workbook long in the making. This workbook is for Azure SQL DBs, SQL DW and Elastic Pool servers. This is my most in depth Azure Monitor workbook to date and brings in Metrics and Logs in from across your Azure SQL resources. I’ve said a few times on twitter that if …

Read more

Azure Monitor Change Tracking Workbook

I’m back again, with another workbook. This time for Azure Automation Change Tracking solution for Azure Monitor. If you’ve read my blog at all, you know Change Tracking is one of my favorite solutions for Azure Monitor. You can track your services, as well as registry and software and files, on both Linux and Windows. …

Read more

Log Analytics Operators Has, Contains and In

Recently Log Analytics added a neat feature that allows you to see how well your queries run. Because Log Analytics Operators Has and Contains perform similar functions, some have been advising to only use the Has operator as it is the most efficient. However, Has is nice but it is not the be all and …

Read more

Azure Monitor, Sentinel QuickStart Workbook templates

If you’ve followed me at all over the last few years, I make a lot of workbooks. I have a number of them on my github. I have these workbooks for your usage, completely free. LogicApps/Azure Sentinel Playbooks Azure Automation Update Management Azure File Sync Syslog Windows Event Log But now I’m putting out the …

Read more

Virtual Event: SCOMathon

Incase you hadn’t heard, SCOMathon is next week. This virtual event is chock full of great content for both APAC and Western time zones. There are several sessions from Microsoft Premier Field engineers as well as MVPs and community experts.   In particular Kevin Greene will be speaking. Leon Laude is speaking. As is Bob …

Read more

Azure Sentinel Syslog Workbook

I recently took a look at the Azure Sentinel Syslog Workbook, called Linux Machines. This workbook is not great, its essentially a dashboard. For me the power of Workbooks in both Azure Monitor and Azure Sentinel is hunting, whether you’re hunting threats or operational issues with your infrastructure or applications. Workbook Resources If this is …

Read more

Overview of Azure Monitor, Security Center & Sentinel

In the past few months I’ve spoken with multiple Microsoft employees and even Microsoft MVPs that don’t understand Azure Sentinel, Azure Security Center, Azure Monitor and Log Analytics and whats the difference. There seems to be some confusion around these products and how they are used together.  I recently put together a diagram for a …

Read more