Merge pull request #276028 from AbbyMSFT/investigator

Azure Monitor investigator

Author: American-Dipper

.openpublishing.redirection.azure-monitor.json

@@ -6679,21 +6679,6 @@
             "redirect_url": "/azure/azure-monitor/monitor-azure-monitor-reference",
             "redirect_document_id": false
         },
-        {
-            "source_path_from_root": "/articles/azure-monitor/ai-ops/responsible-ai-faq.md",
-            "redirect_url": "/azure/copilot/overview",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/azure-monitor/ai-ops/investigator-overview.md",
-            "redirect_url": "/azure/copilot/overview",
-            "redirect_document_id": false
-        },
-        {
-            "source_path_from_root": "/articles/azure-monitor/ai-ops/investigate-alert-instance.md",
-            "redirect_url": "/azure/copilot/overview",
-            "redirect_document_id": false
-        },
         {
             "source_path_from_root": "/articles/azure-monitor/azure-monitor-monitoring-reference.md",
             "redirect_url": "/azure/azure-monitor/monitor-azure-monitor-reference",

articles/azure-monitor/ai-ops/investigate-alert-instance.md

@@ -0,0 +1,51 @@
+---
+title: Investigate an incident with Azure Monitor Investigator
+description: Learn how to use the Azure Monitor investigator to use AIOps to investigate an incident using AI.
+ms.author: abbyweisberg
+author: MSFT
+ms.topic: how-to
+ms.date: 04/09/2024
+ms.reviewer: yalavi
+
+# Customer intent: As a Site Reliability Engineer (SRE), developer, or IT operations engineer, I want to know how to use AI to explain why an alert was fired and tell me what my next steps should be to resolve the issue.
+---
+
+# Use AIOps to investigate incidents Azure Monitor Investigator
+
+This article describes how to use Azure Monitor Investigator to trigger an investigation to identify resource issues, or to explain why an alert was fired, and provide next steps to resolve the issue.
+
+## Investigate an alert
+
+1. From the home page in the [Azure portal](https://portal.azure.com/), select **Monitor** > **Alerts**.
+1. From the **Alerts** page, select the alert that you want to investigate.
+1. In the alert details pane, select **Investigate** on the top right.
+
+    :::image type="content" source="./media/investigate-alert-instance/investigate-button.png" alt-text="Screenshot of the investigate button from the alert details page.":::
+
+1. Alternatively, you can select **Investigate** from the email notification about an alert.
+1. The investigation starts to run. 
+
+    :::image type="content" source="./media/investigate-alert-instance/investigator-running.png" alt-text="Screenshot of the investigator in the middle of running.":::
+
+1. When the investigation is complete, a summary of the incident is displayed with recommendations for how to mitigate the issue.
+
+    :::image type="content" source="./media/investigate-alert-instance/investigator-response.png" alt-text="Screenshot of the investigator response with recommendations.":::
+
+
+## Ask Copilot to trigger an investigation
+
+1. From the home page in the [Azure portal](https://portal.azure.com/), select **Copilot**.
+1. In **Copilot**, ask about resource issues to get more insight into the issue. Here are some examples of questions you can ask:
+    - "Is there any anomaly in my edge resource?"
+    - "Run anomaly detection for the last two days."
+    - "Any anomaly on my AKS resource?"
+    - "Had an alert in my HCI at 8 am this morning, run an anomaly investigation for me"
+    - "Run anomaly detection at 2023-10-27T20:48:53Z."
+    - "Run anomaly detection at 10/27/2023, 8:48:53 PM"
+ 
+1.  Copilot runs an investigation and respond with the results.
+
+
+## Next steps
+
+Learn about [Responsible AI for Azure Monitor Investigator](responsible-ai-faq.md).

articles/azure-monitor/ai-ops/investigator-overview.md

@@ -0,0 +1,57 @@
+---
+title:  Azure Monitor Investigator overview
+description: Learn about Microsoft Azure Monitor Investigator and how it can help troubleshoot incidents in Azure resources using AI.
+ms.date: 04/09/2024
+ms.topic: overview
+ms.service: azure-monitor
+ms.author: abbyweisberg
+author: AbbyMSFT
+ms.reviewer: yalavi
+
+#customer intent: To learn about Azure Monitor Investigator and how it can help me troubleshoot incidents in Azure resources.
+---
+
+# What is Azure Monitor Investigator (preview)?
+
+Azure Monitor Investigator (preview) is an AIOps solution designed to improve the way Site Reliability Engineers (SREs) and developers approach incidents. Investigator  simplifies the process of incident troubleshooting, enabling faster resolution of issues with your Azure resources and the workloads running on them. Azure Monitor Investigator uses Azure monitor data to scan for anomalies across all your Azure resources, so that you don't have to rely on manual investigation methods like sifting through static dashboards or executing predefined queries. Based on the metrics, such as specific clusters, regions, error codes, or operations dimensions and labels, Azure Monitor investigator provides SREs and developers with actionable insights and concrete leads for further investigation.
+
+These are the ways you can trigger an investigation:
+
+- When an Azure Monitor alert is triggered, you can start an investigation with a single click from the alert instance.
+- You can start an investigation from the notification that you receive when an alert is triggered, for all action types other than phone or SMS.
+- Using Azure Copilot, you can ask about resource issues, and trigger an investigation.
+
+The system presents a summary of the issue and outlines what we know, a possible explanation, and what can be done next.
+
+## Automate analysis with Azure Monitor Investigator (preview)
+Azure Monitor Investigator (preview) automates analysis to simplify the identification of anomalies across Azure resources and provides recommended next steps with the following capabilities:
+
+### Metric analysis
+- Scans the Azure resources in the investigation target and scope for anomalies in platform metrics and custom metrics.
+- Assigns scores to metrics that show a correlation with the incident start time.
+- Generates explanations for the incident by conducting sub-pattern analysis to explain anomalies based on metric dimensions or labels that generate the most impact. 
+- Groups and ranks explanations to present the most likely causes.
+
+### Actionable insights
+- Provides an issue summary with insights into what happened, the potential causes, and how to further investigate the issue.
+
+### Configurable scope
+Azure Monitor Investigator makes suggestions for which resources to analyze based on the scope of the investigation. The default scope of an investigation includes all metrics of the target resource. You can change the scope to include up to 5 resources.
+
+## Join the preview
+To enable access to Azure Monitor Investigator for your organization, and to take part in shaping its development, there's a one-time setup process per subscription.
+
+In line with our commitment to responsible AI, we're currently limiting access to Azure Monitor Investigator (preview). Access to Azure Monitor Investigator (Preview) requires a registration process and is currently only available to a select group of enterprise customers and partners. Customers interested in using Azure Monitor Investigator (Preview) must [complete a registration form to request access](https://forms.office.com/r/hW2QJhXE2N).
+
+Granting access to Azure Monitor Investigator (preview) is at the discretion of Microsoft, based on eligibility criteria and a vetting process. Customers must acknowledge that they have read and understand the terms of service specific to Azure Monitor Investigator (Preview) within Azure.
+
+Azure Monitor Investigator (preview) is available under the terms governing the subscription to Microsoft Azure. Customers should review these terms thoroughly as they have important information and conditions that govern the use of Azure Monitor Investigator (Preview).
+
+If you have any questions about gaining access, consult with your Azure administrator.
+
+Some features and functionalities may be considerably enhanced, changed, or added as the tool evolves based on user feedback and continued development.
+
+## Related content
+
+- Learn how to [use Azure Monitor Investigator for AIOps](investigate-alert-instance.md).
+- Review our [Responsible AI FAQ for Microsoft Azure Investigator](responsible-ai-faq.md).

articles/azure-monitor/ai-ops/media/investigate-alert-instance/investigate-button.png

@@ -0,0 +1,58 @@
+---
+title: Responsible AI FAQ for Azure Monitor Investigator
+description: Learn how Azure Monitor Investigator uses data responsibly, what data is collected, and how to work with it.
+ms.date: 04/09/2024
+ms.topic: faq
+ms.service: azure-monitor
+ms.author: abbyweisberg
+author: AbbyMSFT
+ms.reviewer: yalavi
+
+# customer intent: To learn about how Azure Monitor Investigator uses data and what to expect.
+---
+
+# Responsible AI FAQ for Azure Monitor Investigator (preview)
+
+Azure Monitor Investigator is an AI-powered tool that uses Azure monitor data to scan for anomalies across all your Azure resources. Azure Monitor Investigator leverages Large Language Models (LLMs) and insights about your Azure environment to help you work more efficiently.
+
+## What is Azure Monitor Investigator (preview)?
+
+Azure Monitor Investigator is an advanced AIOps solution that helps IT operations teams efficiently find, troubleshoot, and resolve incidents. It uses AI and machine learning to automate the investigation process, offering insights and recommendations for issue mitigation based on data such as platform metrics and custom metrics. For an overview of how Azure Monitor Investigator works and a summary of its capabilities, see the [Azure Monitor Investigator (preview) overview](investigator-overview.md).
+
+## Are Azure Monitor Investigator's (preview) results reliable?
+
+Azure Monitor Investigator is designed to generate the best possible suggestions based on the data and context to which it has access. However, like any AI-powered system, its responses might not always be perfect. The results generated by Azure Monitor Investigator should be carefully evaluated, tested, and validated before being deployed to your Azure environment.
+
+## How does Azure Monitor Investigator (preview) use data from my Azure environment?
+
+Azure Monitor Investigator analyzes data within your Azure environment to generate responses. Azure Monitor Investigator only has access to resources that you have access to and can only perform actions that you have the permissions to perform, Azure Monitor Investigator operates within the constraints of your existing access management controls, such as Azure Role-Based Action Control, Privileged Identity Management, Azure Policy, and resource locks.
+
+## What data does Azure Monitor Investigator (preview) collect?
+
+Azure Monitor Investigator doesn't use user-provided prompts or its own responses to train or improve the underlying AI models. User engagement data, such as the number of sessions, session duration, selected skills, and feedback, might be collected to improve Microsoft products and services, subject to the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement) and explicit user consent.
+
+## What should I do if I see unexpected or offensive content?
+
+Azure Monitor Investigator development is guided by our [AI principles](https://www.microsoft.com/ai/principles-and-approach) and [Responsible AI Standard](https://aka.ms/RAIStandardPDF). We have prioritized mitigating exposing customers to offensive content. However, you might still see unexpected results. We continually work to improve the technology to prevent such content.
+
+## How current is the information Azure Monitor Investigator (preview) provides?
+
+Azure Monitor Investigator uses the latest data available to provide the most recent information. While there might be some lag in the data coming in to the monitoring system, it generally provides current information.
+
+## Do all Azure services have the same level of integration with Azure Monitor Investigator (preview)?
+
+No. Our goal is to provide the same level of integration of Azure Monitor Investigator with all Azure services. We're continuously working to add more Azure Monitor Investigator integrations with more Azure services.
+
+## What are the fairness considerations in the development of Azure Monitor Investigator (preview)?
+
+Fairness is a core part of Azure Monitor Investigator's development. Consistent performance across different scenarios and input data types is critical. The system is evaluated for fairness harms, including monitoring log probabilities for answer reliability and checking for incorrect output. Measures are taken to prevent harmful generated text and ensure that fallback options are in place when AI encounters issues like timeouts or service unavailability.
+
+## How should I integrate Azure Monitor Investigator (preview) into my workflow?
+
+To integrate Azure Monitor Investigator effectively into your operations, it's important to understand its capabilities and limitations. Testing using real data from your environment helps to evaluate its performance. Ensure that SREs are trained in the system's intended uses, how to interact with it, and when to rely on human judgment over automated output. This balanced approach maximizes the benefits of Azure Monitor Investigator while maintaining oversight and control.
+
+## Related content
+
+- Learn about Azure Monitor AI and Machine Learning capabilities in [Azure Monitor AI and Machine Learning](../logs/aiops-machine-learning.md).
+- [Use AIOps to investigate incidents Azure Monitor Investigator](investigate-alert-instance.md).
+

articles/azure-monitor/ai-ops/media/investigate-alert-instance/investigator-response.png

@@ -1433,6 +1433,14 @@ items:
         href: autoscale/autoscale-diagnostics.md
       - name: Troubleshooting
         href: autoscale/autoscale-troubleshoot.md
+  - name: AI Ops
+    items:
+    - name: Azure Monitor Investigator Overview
+      href: ai-ops/investigator-overview.md
+    - name: Responsible AI FAQ
+      href: ai-ops/responsible-ai-faq.md
+    - name: Investigate an alert using Investigator
+      href: ai-ops/investigate-alert-instance.md
 - name: Samples
   items:
   - name: Resource Manager templates