Examkin

Question

Difficulty: HardAzure Monitor and Log Analytics

To query Azure service outage events and resource performance metrics within the same Log Analytics workspace using Kusto Query Language (KQL), you must configure Azure Service Health to send its activity logs to that workspace, as Azure Monitor does not automatically consolidate platform-wide service health incidents into resource-level log repositories.

Answer: Answer

Answer

True
The statement is true because platform-level service health notifications (managed by Azure Service Health) are written to the Azure Activity Log, while resource-level performance metrics and logs are managed by Azure Monitor in their own repositories. These two streams do not automatically merge; they require the administrator to configure a diagnostic setting to route the Activity Log to the target Log Analytics workspace for unified KQL querying.

Step-by-Step Solution

1
Differentiate between the scopes of Azure Monitor and Azure Service Health.
Identify that Azure Monitor manages resource-specific performance metrics and logs, while Azure Service Health monitors platform-wide issues and outages.
Understanding the boundary between resource-level telemetry and platform-level health alerts is required to determine how their logs are collected.
2
Evaluate the requirement of querying both sources within the same Log Analytics workspace using KQL.
Recognize that a Log Analytics workspace can only execute KQL queries across data that has been successfully routed to it.
Since KQL operates within the workspace boundary, data must be consolidated into the workspace to be queried together.
3
Analyze how Azure Service Health events are logged and forwarded.
Determine that Service Health events populate the Azure Activity Log, which by default is stored separately from resource diagnostic logs and requires a Diagnostic Setting to stream to a Log Analytics workspace.
This confirms that manual configuration is mandatory to achieve log consolidation, making the statement true.

Key Concept

Integration of Azure Service Health and Azure Monitor Log Analytics
Rate this question

Topics

Azure Monitor and Log Analytics

More questions from this topic