This public repo serves the Azure Monitor community. It contains log queries, workbooks, and alerts, shared to help Azure Monitor users make the most of it.
Queries - copy and paste queries to your Log Analytics environment, or run on the Log Analytics Demo Environment
Workbooks - the workbooks in this repo can be deployed as ARM templates to your Azure Monitor environment
Alerts - the alerts in this repo are log-based, meaning they are in fact log queries. You can run them on the Log Analytics Demo Environment or use them to create and test alerts on your own environment
| File/folder | Description |
|---|---|
Azure services |
Queries, workbooks and alerts for specific Azure services |
Scenarios |
Queries, workbooks and alerts to handle common "How to's |
Solutions |
Queries, workbooks and alerts organized by solutions |
README.md |
This README file |
LICENSE |
The license for this repo |
Anyone can contribute to the repo, you don't need to be a pro.
Any query or workbook you find useful can benefit other users as well. We also keep a list of the top asks, you may find it inspiring :)
We follow the GitHub fork and pull model
-
Fork this repo - just click the Fork button on the top right corner of this page
-
Update your forked repo - add examples, edit existing content
-
Submit a pull request from your repo
This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.
When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
Any source code in this repository is licensed under the MIT license as found here.
The content in this repo uses KQL (Kusto Query Language). To get started with queries see this article.
This repo has many examples that you may want to edit to fit your exact scenario. If you're not sure how to do that - post your question on our community forum.
Use Issues to call us out on missing content or something else we should improve on, and check out the FAQ page for common questions & answers.
Upon redistribution of this repo, please be respectful of the readers and authors of this documentation, and include a link to the original repo master branch.