- 6 minutes to read
When you have critical applications and business processes that rely on Azure resources, it's important to monitor those resources for their availability, performance, and operation. This article describes the monitoring data that's generated by Azure virtual machines (VMs), and it discusses how to use the features of Azure Monitor to analyze and alert you about this data.
This article provides basic information to help you get started with monitoring your VMs. For a complete guide to monitoring your entire environment of Azure and hybrid virtual machines, see Monitor virtual machines with Azure Monitor.
What is Azure Monitor?
Azure Monitor is a full stack monitoring service that provides a complete set of features to monitor your Azure resources. You don't need to directly interact with Azure Monitor, though, to perform a variety of monitoring tasks, because its features are integrated with the Azure portal for the Azure services that it monitors. For a tutorial with an overview of how Azure Monitor works with Azure resources, see Monitor Azure resources by using Azure Monitor.
Monitoring virtual machine data
Azure virtual machines collect the same kinds of monitoring data as other Azure resources, which are described in Monitoring data from Azure resources. For detailed information about the metrics and logs that are created by Azure virtual machines, see Reference: Monitoring Azure virtual machine data.
To begin exploring Azure Monitor, go to the Overview page for your virtual machine, and then select the Monitoring tab. You can see the number of active alerts on the tab.
The Alerts pane shows you the alerts fired in the last 24 hours, along with important statistics about those alerts. If there are no alerts configured for your VM, there is a link to help you quickly create new alerts for your VM.
The Key Metrics pane includes charts that show key health metrics, such as average CPU and network utilization. At the top of the pane, you can select a duration to change the time range for the charts, or select a chart to open the Metrics pane to drill down further or to create an alert rule.
The Activity log displays recent activity by the virtual machine, including any configuration changes and when it was stopped and started. View the Activity log in the Azure portal, or create a diagnostic setting to send it to a Log Analytics workspace, where you can view events over time or analyze them with other collected data.
Azure Monitor agent
Azure Monitor starts automatically collecting metric data for your virtual machine host when you create the VM. To collect logs and performance data from the guest operating system of the virtual machine, though, you must install the Azure Monitor agent. You can install the agent and configure collection using either VM insights or by creating a data collection rule as described below.
Some services in Azure display customized monitoring experiences in Azure Monitor. These experiences are called insights, and they include pre-built workbooks and other specialized features for that particular service.
VM insights is designed to monitor your Azure and hybrid virtual machines in a single interface. VM insights provides the following benefits beyond other features for monitoring VMs in Azure Monitor:
- Simplified onboarding of the Azure Monitor agent and the Dependency agent, so that you can monitor a virtual machine guest operating system and workloads.
- Pre-defined data collection rules that collect the most common set of performance data.
- Pre-defined trending performance charts and workbooks, so that you can analyze core performance metrics from the virtual machine's guest operating system.
- The Dependency map, which displays processes that run on each virtual machine and the interconnected components with other machines and external sources.
For a tutorial on enabling VM insights for a virtual machine, see Enable monitoring with VM insights for Azure virtual machine. For general information about enabling insights and a variety of methods for onboarding virtual machines, see Enable VM insights overview.
Create data collection rule
If you enable VM insights, the Azure Monitor agent is installed and starts sending a predefined set of performance data to Azure Monitor Logs. You can create additional data collection rules to collect events and other performance data. To learn how to install the Azure Monitor agent and create a data collection rule that defines the data to collect, see Tutorial: Collect guest logs and metrics from an Azure virtual machine.
Metrics are numerical values that describe some aspect of a system at a particular point in time. Although platform metrics for the virtual machine host are collected automatically, you must install the Azure Monitor agent and create a data collection rule to collect guest metrics.
The Overview pane includes the most common host metrics, and you can access others by using the Metrics pane. With this tool, you can create charts from metric values and visually correlate trends. You can also create a metric alert rule or pin a chart to an Azure dashboard. For a tutorial on using this tool, see Analyze metrics for an Azure resource.
For a list of the available metrics, see Reference: Monitoring Azure virtual machine data.
Event data in Azure Monitor Logs is stored in a Log Analytics workspace, where it's separated into tables, each with its own set of unique properties.
VM insights stores the data it collects in Logs, and the insights provide performance and map views that you can use to interactively analyze the data. You can work directly with this data to drill down further or perform custom analyses. For more information and to get sample queries for this data, see How to query logs from VM insights.
To analyze other log data that you collect from your virtual machines, use log queries in Log Analytics. Several built-in queries for virtual machines are available to use, or you can create your own. You can interactively work with the results of these queries, include them in a workbook to make them available to other users, or generate alerts based on their results.
Azure Monitor alerts proactively notify you when important conditions are found in your monitoring data. These alerts can help you identify and address issues in your system before your customers notice them. You can set alerts on metrics, logs, and the activity log.
Start by enabling recommended alerts. These are a predefined set of alert rules based on host metrics for the VM. You can quickly enable and customize each of these rules with a few clicks in the Azure portal. See Tutorial: Enable recommended alert rules for Azure virtual machine.
Use the VM availability metric to alert when a VM isn't running. This metric is currently in public preview and not yet included in recommended alerts, so you must create the alert rule yourself. See Tutorial: Create availability alert rule for Azure virtual machine (preview).
Multi-resource metric alerts
Using recommended alerts, a separate alert rule is created for each VM. You can choose to instead use a multi-resource alert rule to use a single alert rule that applies to all VMs in a particular resource group or subscription (within the same region). Use the guidance at Create a new alert rule to create a metric alert rule using a subscription or resource group for the scope and the other details from alert rules created by recommended alerts.
Other alert rules
For more information about the various alerts for Azure virtual machines, see the following resources:
- See Monitor virtual machines with Azure Monitor: Alerts for common alert rules for virtual machines.
- See Create a log query alert for an Azure resource for a tutorial on creating a log query alert rule.
- For common log alert rules, go to the Queries pane in Log Analytics. For Resource type, enter Virtual machines, and for Type, enter Alerts.
For documentation about the logs and metrics that are generated by Azure virtual machines, see Reference: Monitoring Azure virtual machine data.
Virtual machine monitoring, or VM monitoring, refers to the process of monitoring virtualized instances across your network. VM monitoring involves using software to monitor and manage these virtual machines, typically by examining the logs they continuously generate.How do I Monitor my Azure VM performance? ›
- In the Azure portal, select Virtual Machines.
- From the list, choose a VM and in the Monitoring section choose Insights.
- Select the Performance tab.
You can monitor VMM health and status in Operations Manager by installing the VMM management pack, which provides many dashboards in the Operations Manager console. Monitors the health of virtual machines. It shows information about discovered VMs in the VMM fabric.How do I enable VM Monitoring? ›
- In the vSphere Client, browse to the vSphere HA cluster.
- Click the Configure tab.
- Select vSphere Availability and click Edit.
- Click Failures and Responses and expand VM Monitoring.
- Select VM Monitoring and Application Monitoring.
How to monitor Windows Service in Azure VM
- Step 1: Enable VM Inventory and Change Tracking. ...
- Step 2: Configure Alert. ...
- Step 3: Testing the Alert.
- Click Start > Run.
- Type msinfo32 and press Enter.
- In the right pane, look for System Manufacturer for 'VMware, Inc. ' If this is present, you are running within a virtualized platform, and cannot install another virtualization product on top of it.
Is Your VM Safe From Hackers? It's certainly possible for a virtual machine to become compromised, especially if you access it on a mobile device in a place with public Wi-Fi. Just like all devices going on a public Wi-Fi system, hackers could infiltrate your OS if not taking proper security measures.What is the biggest risk of using virtual machines? ›
Virtual machines are also susceptible to viruses, malware, and ransomware attacks. These attacks can come from infected VM images or from users without proper security training. Once a VM is infected, it can spread malware across the entire virtual infrastructure without adequate isolation and security controls.How do I Monitor my Azure VM CPU utilization? ›
- Log in to the Azure portal and select Virtual Machines.
- Select a virtual machine from the list of VMs to view its usage.
- In the Monitoring section, select Insights.
- Select the Performance tab.
- In the Azure portal, click All services. In the list of resources, type Monitor. As you begin typing, the list filters based on your input. Select Monitor.
- On the Monitor navigation menu, select Log Analytics and then select a workspace.
In the Azure portal, select Virtual Machines. From the list, choose a VM and in the Monitoring section choose Insights. Select the Performance tab.How do I monitor a VM to VM traffic in a virtual network? ›
You want to be able to monitor and filter VM-to-VM traffic within a virtual network. What should you do? Implement a virtual firewall within the hypervisor. Virtualized hosts are susceptible to the same network exploits as physical network hosts and need to be protected by a firewall.What are the 5 best practices for virtual machine management? ›
- Use self-service management to prevent VM sprawl. ...
- Provide VM templates to ensure right sizing. ...
- Take advantage of tools to monitor performance. ...
- Ensure VM security with appropriate permissions. ...
- Use VPN, multifactor authentication for remote access.
Collect, analyze, and act on telemetry data from your cloud and hybrid environments. Azure Monitor supports your operations at scale by helping you maximize the performance and availability of your resources and proactively identify problems.How does a virtual machine monitor work? ›
A virtual machine monitor, also known as a hypervisor, is a software, hardware, or firmware-based process that manages the creation and operation of virtualized environments from the host system. Virtual machine monitors provide IT operations managers visibility into the usage and performance of associated VMs.What does Azure Monitor VM Insights provide? ›
VM insights stores its data in Azure Monitor Logs, which allows it to deliver powerful aggregation and filtering and to analyze data trends over time. You can view this data in a single VM from the virtual machine directly. Or, you can use Azure Monitor to deliver an aggregated view of multiple VMs.What is a virtual monitoring? ›
What is virtual monitoring? Virtual monitoring, virtual machine monitoring, or virtualization monitoring is the method in which software is used to monitor virtualized occurrences across a network.What is Azure Monitor in Azure? ›
Azure Monitor helps you maximize the availability and performance of your applications and services. It delivers a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments.Can you use Azure Monitor to Monitor resources across multiple Azure subscriptions? ›
You can use Azure Monitor to monitoring synapse pipelines across multiple subscriptions/workspaces in same tenant. Azure Monitor can consolidate log entries from multiple Azure resources, subscriptions, and tenants into one location for analysis together.How do I track user activity on Azure? ›
Access the activity logs in the portal
Go to Azure AD and select Audit logs, Sign-in logs, or Provisioning logs. Adjust the filter according to your needs. For more information on the filter options for audit logs, see Azure AD audit log categories and activities.
Web servers can only tell details about the web browsers through their user agent string. Unless you're using a special web browser (unlikely) that detects that it's running in a VM, then the web server shouldn't know.Do virtual machines hide your IP? ›
Using a virtual machine to browse the Internet doesn't mask your IP address or automatically shield you from threats. And although your VM and host computer are technically separate, some things could still be shared between the two if you're not careful.Does the software running on a VM know that it's running on a virtual computer? ›
Yes, they can.How do I secure my virtual machine? ›
- Remove Unnecessary Hardware Devices.
- Disable Unused Display Features.
- Disable Unexposed Features.
- Disable VMware Shared Folders Sharing Host Files to the Virtual Machine.
- Disable Copy and Paste Operations Between Guest Operating System and Remote Console.
- Limiting Exposure of Sensitive Data Copied to the Clipboard.
A capability of malware to detect and identify that the environment it resides on is a virtual machine (VM). Some methods of determining a VM are simple while others are not. Once the malware is aware that it's on a VM, it usually ceases functioning as its supposed to.How do you protect your virtual machines from VM escape? ›
- Keep virtual machine software patched.
- Install only the resource-sharing features that you really need.
- Keep software installations to a minimum because each program brings its own vulnerabilities.
- Not having a backup. ...
- Loving abstraction, not having separation. ...
- Going too big. ...
- Skipping drivers. ...
- Running VMs on an obsolete host.
Disadvantages. Virtual machines are less efficient than real machines because they access hardware indirectly. Running VM software on top of the host operating system means that it will have to request access to storage and memory from the physical device.What are three reasons why a virtual machine might fail to power on? ›
- ESXi OS problems.
- File corruption.
- File locks.
- Guest OS problems.
- License problems.
- Network problems.
- Storage Array/Datastore problems.
- User permissions.
Monitor CPU and memory metrics
Open the device in the Azure portal, and go to Virtual Machines. Select the virtual machine, and select Metrics. By default, the graphs show average CPU and memory usage for the previous hour. To see data for a different time period, select a different option beside Show data for last.
- Coreinfo. Coreinfo is a Microsoft command-line utility, developed by Mark Russinovich. ...
- Microsoft System Information (MSINFO32) ...
- Microsoft wmic command.
Insights provide a customized monitoring experience for particular Azure services. They use the same metrics and logs as other features in Azure Monitor but may collect extra data and provide a unique experience in the Azure portal.What is the difference between Azure monitor and Azure log analytics? ›
Monitor is the brand, and Log Analytics is one of the solutions. Log Analytics and Application Insights have been consolidated into Azure Monitor to provide a single integrated experience for monitoring Azure resources and hybrid environments.What are the two main kinds of data Azure monitor works with? ›
Overall, Azure Monitor is using two fundamental types of data to work. Those are metrics and logs the tool is collecting into data stores to perform actions such as analysis, alert generation and streaming to connected external systems.How do I Monitor my virtual memory? ›
To start Performance Monitor, click Start, click Control Panel, click Administrative Tools, and then double-click Performance Monitor. Here is a summary of some important counters and what they tell you: Memory, Committed Bytes: This counter is a measure of the demand for virtual memory.How do I Monitor my Azure storage? ›
View from a storage account
To access VM insights directly from a storage account: In the Azure portal, select Storage accounts. From the list, choose a storage account. In the Monitoring section, choose Insights.
Select the vCenter object in the navigation pane of the vSphere Client. Click Configure > Alarm Definitions. In the Alarm Name column header, click the filter icon and search for Virtual machine memory usage.What is the best way to Monitor virtual machine manager? ›
You can monitor VMM health and status in Operations Manager by installing the VMM management pack, which provides many dashboards in the Operations Manager console. Monitors the health of virtual machines. It shows information about discovered VMs in the VMM fabric.Can VM traffic be tracked? ›
Short answer: yes, as any regular computer would. A little more detail: VMs are computers like any other. VMs can have one IP address, public or private. VMs can even have more than one IP address.Can Virtual Desktop be monitored? ›
As virtual desktops are implemented as virtual machines, many IT Operations teams try to use their existing virtual server monitoring tool (e.g., VMware vCenter, Citrix XenCenter, Microsoft SCVMM, etc.) to monitor a virtual desktop infrastructure.