Skip to content

Commit 5081370

Browse files
cdparkcdpark
committed
Curate for Monitor duplication
1 parent 753bd69 commit 5081370

8 files changed

+169
-174
lines changed

‎.openpublishing.redirection.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4093,6 +4093,11 @@
40934093
"redirect_url": "/azure/site-recovery/physical-server-azure-architecture-modernized",
40944094
"redirect_document_id": false
40954095
},
4096+
{
4097+
"source_path_from_root": "/articles/site-recovery/reporting-log-analytics.md",
4098+
"redirect_url": "/azure/site-recovery/monitor-site-recovery-reference#log-analytics-data-model",
4099+
"redirect_document_id": false
4100+
},
40964101
{
40974102
"source_path_from_root": "/articles/store-php-create-mysql-database.md",
40984103
"redirect_url": "/azure/mysql/single-server/quickstart-create-mysql-server-database-using-azure-portal",

‎articles/site-recovery/monitor-log-analytics.md

Lines changed: 1 addition & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -36,24 +36,7 @@ We recommend that you review [common monitoring questions](monitoring-common-que
3636

3737
## Event logs available for Azure Site Recovery
3838

39-
Azure Site Recovery provides the following Resource specific and legacy tables. Each event provides detailed data on a specific set of site recovery related artifacts.
40-
41-
**Resource Specific tables**:
42-
43-
- [AzureSiteRecoveryJobs](/azure/azure-monitor/reference/tables/asrjobs)
44-
- [Azure Site Recovery Replicated Items Details](/azure/azure-monitor/reference/tables/ASRReplicatedItems)
45-
46-
47-
**Legacy tables**:
48-
49-
- Azure Site Recovery Events
50-
- Azure Site Recovery Replicated Items
51-
- Azure Site Recovery Replication Stats
52-
- Azure Site Recovery Points
53-
- Azure Site Recovery Replication Data Upload Rate
54-
- Azure Site Recovery Protected Disk Data Churn
55-
- Azure Site Recovery Replicated Item Details
56-
39+
For a list of resource-specific and legacy tables, see [Event logs available for Azure Site Recovery](monitor-site-recovery-reference.md#event-logs-available-for-azure-site-recovery).
5740

5841
## Configure Site Recovery to send logs
5942

‎articles/site-recovery/monitor-site-recovery-reference.md

Lines changed: 151 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,25 @@ Note that some of the following logs apply to Azure Backup and others apply to A
2929

3030
[!INCLUDE [horz-monitor-ref-logs-tables](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-ref-logs-tables.md)]
3131

32+
### Event logs available for Azure Site Recovery
33+
34+
Azure Site Recovery provides the following resource-specific and legacy tables. Each event provides detailed data on a specific set of site recovery related artifacts.
35+
36+
**Resource-specific tables**:
37+
38+
- [AzureSiteRecoveryJobs](/azure/azure-monitor/reference/tables/asrjobs)
39+
- [Azure Site Recovery Replicated Items Details](/azure/azure-monitor/reference/tables/ASRReplicatedItems)
40+
41+
**Legacy tables**:
42+
43+
- Azure Site Recovery Events
44+
- Azure Site Recovery Replicated Items
45+
- Azure Site Recovery Replication Stats
46+
- Azure Site Recovery Points
47+
- Azure Site Recovery Replication Data Upload Rate
48+
- Azure Site Recovery Protected Disk Data Churn
49+
- Azure Site Recovery Replicated Item Details
50+
3251
### Recovery Services Vaults
3352
Microsoft.RecoveryServices/Vaults
3453

@@ -37,6 +56,138 @@ Microsoft.RecoveryServices/Vaults
3756
- [ASRReplicatedItems](/azure/azure-monitor/reference/tables/ASRReplicatedItems#columns)
3857
- [AzureDiagnostics](/azure/azure-monitor/reference/tables/AzureDiagnostics#columns)
3958

59+
## Log Analytics data model
60+
61+
This section describes the Log Analytics data model for Azure Site Recover that's added to the Azure Diagnostics table (if your vaults are configured with diagnostics settings to send data to a Log Analytics workspace in Azure Diagnostics mode). You can use this data model to write queries on Log Analytics data to create custom alerts or reporting dashboards.
62+
63+
To understand the fields of each Site Recovery table in Log Analytics, review the details for the Azure Site Recovery Replicated Item Details and Azure Site Recovery Jobs tables. You can find information about the diagnostic tables [here](/azure/azure-monitor/reference/tables/azurediagnostics).
64+
65+
> [!TIP]
66+
> Expand this table for better readability.
67+
68+
| Category | Category Display Name | Log Table | [Supports basic log plan](../azure-monitor/logs/basic-logs-configure.md#compare-the-basic-and-analytics-log-data-plans) | [Supports ingestion-time transformation](../azure-monitor/essentials/data-collection-transformations.md) | Example queries | Costs to export |
69+
| --- | --- | --- | --- | --- | --- | --- |
70+
| *ASRReplicatedItems* | Azure Site Recovery Replicated Item Details | [ASRReplicatedItems](/azure/azure-monitor/reference/tables/asrreplicateditems) <br> This table contains details of Azure Site Recovery replicated items, such as associated vault, policy, replication health, failover readiness. etc. Data is pushed once a day to this table for all replicated items, to provide the latest information for each item. | No | No | [Queries](/azure/azure-monitor/reference/queries/asrreplicateditems) | Yes |
71+
| *AzureSiteRecoveryJobs* | Azure Site Recovery Jobs | [ASRJobs](/azure/azure-monitor/reference/tables/asrjobs) <br> This table contains records of Azure Site Recovery jobs such as failover, test failover, reprotection etc., with key details for monitoring and diagnostics, such as the replicated item information, duration, status, description, and so on. Whenever an Azure Site Recovery job is completed (that is, succeeded or failed), a corresponding record for the job is sent to this table. You can view history of Azure Site Recovery jobs by querying this table over a larger time range, provided your workspace has the required retention configured. | No | No | [Queries](/azure/azure-monitor/reference/queries/asrjobs) | No |
72+
| *AzureSiteRecoveryEvents* | Azure Site Recovery Events | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics) | No |
73+
| *AzureSiteRecoveryProtectedDiskDataChurn* | Azure Site Recovery Protected Disk Data Churn | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
74+
| *AzureSiteRecoveryRecoveryPoints* | Azure Site Recovery Points | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
75+
| *AzureSiteRecoveryReplicatedItems* | Azure Site Recovery Replicated Items | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
76+
| *AzureSiteRecoveryReplicationDataUploadRate* | Azure Site Recovery Replication Data Upload Rate | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
77+
| *AzureSiteRecoveryReplicationStats* | Azure Site Recovery Replication Stats | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
78+
79+
### ASRReplicatedItems
80+
81+
This is a resource specific table that contains details of Azure Site Recovery replicated items, such as associated vault, policy, replication health, failover readiness. etc. Data is pushed once a day to this table for all replicated items, to provide the latest information for each item.
82+
83+
#### Fields
84+
85+
| Attribute | Value |
86+
|----|----|
87+
| Resource types | microsoft.recoveryservices/vaults |
88+
| Categories |Audit |
89+
| Solutions | LogManagement |
90+
| Basic log | No |
91+
| Ingestion-time transformation | No |
92+
| Sample Queries | Yes |
93+
94+
#### Columns
95+
96+
| Column Name | Type | Description |
97+
|----|----|----|
98+
| ActiveLocation | string | Current active location for the replicated item. If the item is in failed over state, the active location is the secondary (target) region. Otherwise, it is the primary region. |
99+
| BilledSize | real | The record size in bytes |
100+
| Category | string | The category of the log. |
101+
| DatasourceFriendlyName | string | Friendly name of the datasource being replicated. |
102+
| DatasourceType | string | ARM type of the resource configured for replication. |
103+
| DatasourceUniqueId | string | Unique ID of the datasource being replicated. |
104+
| FailoverReadiness | string | Denotes whether there are any configuration issues that could affect the failover operation success for the Azure Site Recovery replicated item. |
105+
| IRProgressPercentage | int | Progress percentage of the initial replication phase for the replicated item. |
106+
| IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
107+
| LastHeartbeat | datetime | Time at which the Azure Site Recovery agent associated with the replicated item last made a call to the Azure Site Recovery service. Useful for debugging error scenarios where you wish to identify the time at which issues started arising. |
108+
| LastRpoCalculatedTime | datetime | Time at which the RPO was last calculated by the Azure Site Recovery service for the replicated item. |
109+
| LastSuccessfulTestFailoverTime | datetime | Time of the last successful failover performed on the replicated item. |
110+
| MultiVMGroupId | string | For scenarios where multi-VM consistency feature is enabled for replicated virtual machines, this field specifies the ID of the multi-VM group associated with the replicated virtual machine. |
111+
| OperationName | string | The name of the operation. |
112+
| OSFamily | string | OS family of the resource being replicated. |
113+
| PolicyFriendlyName | string | Friendly name of the replication policy applied to the replicated item. |
114+
| PolicyId | string | ARM ID of the replication policy applied to the replicated item. |
115+
| PolicyUniqueId | string | Unique ID of the replication policy applied for the replicated item. |
116+
| PrimaryFabricName | string | Represents the source region of the replicated item. By default, the value is the name of the source region, however if you have specified a custom name for the primary fabric while enabling replication, then that custom name shows up under this field. |
117+
| PrimaryFabricType | string | Fabric type associated with the source region of the replicated item. Depending on whether the replicated item is an Azure virtual machine, Hyper-V virtual machine or VMware virtual machine, the value for this field varies. |
118+
| ProtectionInfo | string | Protection status of the replicated item. |
119+
| RecoveryFabricName | string | Represents the target region of the replicated item. By default, the value is the name of the target region. However, if you specify a custom name for the recovery fabric while enabling replication, then that custom name shows up under this field. |
120+
| RecoveryFabricType | string | Fabric type associated with the target region of the replicated item. Depending on whether the replicated item is an Azure virtual machine, Hyper-V virtual machine or VMware virtual machine, the value for this field varies. |
121+
| RecoveryRegion | string | Target region to which the resource is replicated. |
122+
| ReplicatedItemFriendlyName | string | Friendly name of the resource being replicated. |
123+
| ReplicatedItemId | string | ARM ID of the replicated item. |
124+
| ReplicatedItemUniqueId | string | Unique ID of the replicated item. |
125+
| ReplicationHealthErrors | string | List of issues that might be affecting the recovery point generation for the replicated item. |
126+
| ReplicationStatus | string | Status of replication for the Azure Site Recovery replicated item. |
127+
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
128+
| SourceResourceId | string | ARM ID of the datasource being replicated. |
129+
| SourceSystem | string | The agent type that collected the event. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
130+
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
131+
| TenantId | string | The Log Analytics workspace ID |
132+
| TimeGenerated | datetime | The timestamp (UTC) when the log was generated. |
133+
| Type | string | The name of the table |
134+
| VaultLocation | string | Location of the vault associated with the replicated item. |
135+
| VaultName | string | Name of the vault associated with the replicated item. |
136+
| VaultType | string | Type of the vault associated with the replicated item. |
137+
| Version | string | The API version. |
138+
139+
### AzureSiteRecoveryJobs
140+
141+
This table contains records of Azure Site Recovery jobs such as failover, test failover, reprotection etc., with key details for monitoring and diagnostics, such as the replicated item information, duration, status, description, and so on. Whenever an Azure Site Recovery job is completed (that is, succeeded or failed), a corresponding record for the job is sent to this table. You can view history of Azure Site Recovery jobs by querying this table over a larger time range, provided your workspace has the required retention configured.
142+
143+
#### Fields
144+
145+
| Attribute | Value |
146+
|----|----|
147+
| Resource types | microsoft.recoveryservices/vaults |
148+
| Categories | Audit |
149+
| Solutions | LogManagement |
150+
| Basic log | No |
151+
| Ingestion-time transformation | No |
152+
| Sample Queries | Yes |
153+
154+
#### Columns
155+
156+
| Column Name | Type | Description |
157+
|----|----|----|
158+
| _BilledSize | real | The record size in bytes |
159+
| Category | string | The category of the log. |
160+
| CorrelationId | string | Correlation ID associated with the Azure Site Recovery job for debugging purposes. |
161+
| DurationMs | int | Duration of the Azure Site Recovery job. |
162+
| EndTime | datetime | End time of the Azure Site Recovery job. |
163+
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
164+
| JobUniqueId | string | Unique ID of the Azure Site Recovery job. |
165+
| OperationName | string | Type of Azure Site Recovery job, for example, Test failover. |
166+
| PolicyFriendlyName | string | Friendly name of the replication policy applied to the replicated item (if applicable). |
167+
| PolicyId | string | ARM ID of the replication policy applied to the replicated item (if applicable). |
168+
| PolicyUniqueId | string | Unique ID of the replication policy applied to the replicated item (if applicable). |
169+
| ReplicatedItemFriendlyName | string | Friendly name of replicated item associated with the Azure Site Recovery job (if applicable). |
170+
| ReplicatedItemId | string | ARM ID of the replicated item associated with the Azure Site Recovery job (if applicable). |
171+
| ReplicatedItemUniqueId | string | Unique ID of the replicated item associated with the Azure Site Recovery job (if applicable). |
172+
| ReplicationScenario | string | Field used to identify whether the replication is being done for an Azure resource or an on-premises resource. |
173+
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
174+
| ResultDescription | string | Result of the Azure Site Recovery job. |
175+
| SourceFriendlyName | string | Friendly name of the resource on which the Azure Site Recovery job was executed. |
176+
| SourceResourceGroup | string | Resource Group of the source. |
177+
| SourceResourceId | string | ARM ID of the resource on which the Azure Site Recovery job was executed. |
178+
| SourceSystem | string | The agent type that collected the event. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
179+
| SourceType | string | Type of resource on which the Azure Site Recovery job was executed. |
180+
| StartTime | datetime | Start time of the Azure Site Recovery job. |
181+
| Status | string | Status of the Azure Site Recovery job. |
182+
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
183+
| TenantId | string | The Log Analytics workspace ID |
184+
| TimeGenerated | datetime | The timestamp (UTC) when the log was generated. |
185+
| Type | string | The name of the table |
186+
| VaultLocation | string | Location of the vault associated with the Azure Site Recovery job. |
187+
| VaultName | string | Name of the vault associated with the Azure Site Recovery job. |
188+
| VaultType | string | Type of the vault associated with the Azure Site Recovery job. |
189+
| Version | string | The API version. |
190+
40191
[!INCLUDE [horz-monitor-ref-activity-log](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-ref-activity-log.md)]
41192
- [Microsoft.RecoveryServices](/azure/role-based-access-control/permissions/management-and-governance#microsoftrecoveryservices)
42193

‎articles/site-recovery/monitoring-common-questions.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,9 @@ Only machines for which initial replication has completed are included in the co
5555

5656
### How long is data kept in Azure Monitor logs?
5757

58-
By default, retention is for 31 days. You can increase the period in the **Usage and Estimated Cost** section in the Log Analytics workspace. Click on **Data Retention**, and choose the range.
58+
For information on data retention, see [Data retention and archive in Azure Monitor logs](/azure/azure-monitor/logs/data-retention-archive).
59+
60+
You can modify the default retention period in the **Usage and Estimated Cost** section in the Log Analytics workspace. Click on **Data Retention**, and choose the range.
5961

6062
### What's the size of the resource logs?
6163

‎articles/site-recovery/report-site-recovery.md

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -40,11 +40,14 @@ To set up a Log Analytics workspace, [follow these steps](../azure-monitor/logs/
4040

4141
### Configure diagnostics settings for your vaults
4242

43-
Azure Resource Manager resources like Recovery Services vaults, record information about site recovery jobs and replicated items as diagnostics data. To configure diagnostics settings for your vaults, follow these steps:
43+
Azure Resource Manager resources, like Recovery Services vaults, record information about site recovery jobs and replicated items as diagnostics data.
4444

45-
1. On the Azure portal, navigate to the chosen the Recovery Services vault of concern
46-
1. Select **Monitoring** > **Diagnostic settings**.
47-
1. Specify the target for the Recovery Services Vault's diagnostic data. Learn more about [using diagnostic events](../backup/backup-azure-diagnostic-events.md) for Recovery Services vaults.
45+
To learn how to configure diagnostics settings, see [Diagnostic settings in Azure Monitor](/azure/azure-monitor/essentials/diagnostic-settings).
46+
47+
You can also configure diagnostics settings for your vaults using the following steps in the Azure portal.
48+
49+
1. Navigate to the chosen the Recovery Services vault, then select **Monitoring** > **Diagnostic settings**.
50+
1. Specify the target for the Recovery Services Vault's diagnostic data. Learn more about [using diagnostic events](../backup/backup-azure-diagnostic-events.md) for Recovery Services vaults.
4851
1. Select **Azure Site Recovery Jobs** and **Azure Site Recovery Replicated Item Details** options to populate the reports.
4952
:::image type="content" source="./media/report-site-recovery/logs.png" alt-text="Screenshot of logs options.":::
5053

0 commit comments

Comments
 (0)