Microsoft Certified: Azure Solutions Architect ExpertDesign identity, governance, and monitoring solutionsHard

A company is implementing a robust monitoring strategy for its critical Azure infrastructure. They need to collect performance counters, event logs, and custom metrics from Azure Virtual Machines (VMs) and send them to a centralized Log Analytics workspace. The solution must be configurable to collect specific data points and support custom log parsing. Which Azure Monitor component should be used to achieve this for VMs?

  1. AAzure Monitor Agent (AMA)
  2. BAzure Service Health
  3. CAzure Diagnostic Settings
  4. DAzure Activity Log
Show answer & explanation

Correct answer: A. Azure Monitor Agent (AMA)

The Azure Monitor Agent (AMA) is the primary agent for collecting guest operating system telemetry from virtual machines, including performance counters, event logs, and custom logs, and sending them to Log Analytics. It offers a flexible and extensible way to define data collection rules for specific data points and supports custom log parsing.

Why the other options are wrong

  • B. Azure Service Health provides information about the health of Azure services themselves, not guest OS telemetry from your VMs.
  • C. Azure Diagnostic Settings configure sending resource logs and metrics from Azure services to various destinations, but for guest OS telemetry from VMs, an agent is typically used.
  • D. Azure Activity Log records control plane events in Azure (e.g., resource creation/deletion), not guest OS telemetry from VMs.

Azure Monitor Agent (AMA)

A unified agent for Azure Monitor that collects telemetry from guest operating systems of Azure and non-Azure virtual machines and sends it to Azure Monitor features like Log Analytics and Azure Monitor Metrics.

  • Replaces older agents (Log Analytics agent, Diagnostics Extension)
  • Uses Data Collection Rules (DCRs) for flexible configuration
  • Collects performance, event, security, and custom logs

Memory trick: AMA: Agent Monitors All.

More Design identity, governance, and monitoring solutions questions