Microsoft Certified: DevOps Engineer ExpertImplement an instrumentation strategyHard
A company is migrating an on-premises application to Azure. The application currently uses a custom logging agent that writes logs to local files. The DevOps team wants to continue using this agent in Azure VMs but needs to centralize these logs for analysis in Azure Monitor Log Analytics. The solution must be scalable and robust. Which Azure Monitor component should be deployed to the Azure VMs to collect these custom local files and send them to Log Analytics?
- AAzure Monitor Agent (AMA) with Data Collection Rules (DCRs)
- BLog Analytics agent (MMA/AMA)
- CAzure Diagnostics Extension
- DAzure Blob Storage mounted as a file share
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Monitor Agent (AMA) with Data Collection Rules (DCRs)
The Azure Monitor Agent (AMA) with Data Collection Rules (DCRs) is the modern and recommended solution for collecting logs and metrics from Azure VMs and hybrid machines. It offers greater control over data collection, improved security, and better performance compared to the legacy Log Analytics agent (MMA) or Azure Diagnostics Extension, especially for custom text logs.
Why the other options are wrong
- B. The legacy Log Analytics agent (MMA) can collect custom logs, but AMA with DCRs is the newer, more efficient, and recommended approach for custom text logs and offers more granular control.
- C. The Azure Diagnostics Extension is older and primarily used for collecting guest OS metrics and event logs, less flexible for custom text files compared to AMA/DCRs.
- D. Mounting Blob Storage as a file share would store the logs but wouldn't automatically ingest them into Log Analytics for analysis.
Azure Monitor Agent (AMA)
The unified agent for Azure Monitor that collects telemetry from Azure and hybrid machines, configured via Data Collection Rules (DCRs).
- Replaces legacy Log Analytics agent (MMA) and Azure Diagnostics Extension.
- Uses Data Collection Rules (DCRs) for granular configuration.
- Supports custom text logs, syslog, performance counters, and event logs.
Memory trick: AMA and DCRs: The modern way to collect VM logs.