Microsoft Azure offers distinct AI capabilities for operations and incident response. They can be classified into three groups: anomaly detection that stops at alerts, an Observability agent that inve...

Advanced platform metrics for Azure Monitor are now generally available. Advanced platform metrics provide finer-grained signals that help customers more quickly and accurately identify changes and trends within their resources.

Metrics usage insights is now generally available, giving you greater visibility into what's driving metrics usage across your Azure Monitor workspace. Monitor workspace utilization, identify unused metrics, understand usage trends, and investigate changes in ingestion volume to help optimize costs and plan capacity.

The Auxiliary table plan in Azure Monitor Logs gives you a cost-effective way to ingest and retain high-volume, verbose logs that you keep for compliance and auditing but rarely query. Two highly requested capabilities are now generally available.

The Auxiliary table plan in Azure Monitor Logs is a cost-effective option for ingesting and retaining high-volume, verbose logs used for compliance and auditing. Auxiliary Logs is now generally available in the sovereign clouds: Azure Government (Fairfax) and China.

Azure Copilot Observability Agent, an AI-powered operational companion in Azure Monitor, is now covering Log Analytics data in Basic and Auxiliary table plans during interactive analysis and deep investigations. Teams can move high-volume telemetry - including container stdout and stderr, audit trails, and node syslog - to lower-cost table plans while keeping supported data available to the agent alongside metrics, traces, topology, and Azure resource context.

Cut through alert noise and move from detection to root cause using the Azure Copilot Observability Agent. It autonomously investigates incidents, correlates signals across logs, metrics, alerts, application health, and ML anomalies, then surfaces root cause with charts and recommended next steps. Extend coverage to your AI agents in Microsoft Foundry, track Gen AI errors and token consumption with trace-level detail, and write plain-language instructions to tune autonomous behavior to match your team's workflow. Matt McSpirit, Microsoft Azure expert, shares how to take full control of incident response at scale. ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics #AzureMonitor #AIOps #Copilot #MicrosoftAzure

Monitor your Azure Landing Zone with Azure Monitor Baseline Alerts (AMBA).

Overview of Microsoft services and functionalities that contribute to a complete monitoring strategy for your Azure services and applications.

Microsoft has announced that SCOM Management Packs for SSRS, PBIRS, and SSAS will reach End of Support in January 2027, forcing enterprise migration to Azure Monitor.

YouTube video by Barbara Forbes | Ba4bes

New anomaly detection capability helps operations teams identify unusual behavior without manually tuning alert thresholds.

Threat actors are abusing Microsoft Azure Monitor to send callback phishing emails that impersonate the Microsoft Account Security Team and warn of unauthorized billing charges. These alerts are sent from azure-noreply@microsoft.com and pass SPF, DKIM, and DMARC checks, using editable alert descriptions and attacker-controlled mailing lists to deliver urgent invoice-themed messages urging victims to call fraudulent phone numbers. #AzureMonitor #WindowsDefender

In this blog post, you’ll learn how to enable Monitor mode on the Azure Connected Machine agent to support restricted monitoring and security scenarios for your Azure Arc-enabled servers. In …

Today we’re featuring a guest author, Akshay Kokane, who’s a Software Engineer at Microsoft within the Azure CxP team. He’s written an article we’re sharing below, focused on a Step-by-Step Guide to…

Hello blog readers 😊 How many times have you found yourself in a situation where you created Azure Monitor alerts but the threshold you specified was not...