Skip to content

Commit 6597b8f

Browse files
authored
Merge pull request #278870 from cdpark/horz-monitor-siterecovery2
Q&M: Curate 27 SOX Azure Monitor horizontals articles to reduce duplication - Site Recovery
2 parents af593c2 + 2a28e7b commit 6597b8f

8 files changed

+175
-164
lines changed

articles/site-recovery/.openpublishing.redirection.site-recovery.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -945,6 +945,11 @@
945945
"redirect_url": "vmware-azure-tutorial-prepare-on-premises",
946946
"redirect_document_id": false
947947
},
948+
{
949+
"source_path_from_root": "/articles/site-recovery/reporting-log-analytics.md",
950+
"redirect_url": "/azure/site-recovery/monitor-site-recovery-reference#log-analytics-data-model",
951+
"redirect_document_id": false
952+
},
948953
{
949954
"source_path_from_root": "/articles/site-recovery/site-recovery-best-practices.md",
950955
"redirect_url": "vmware-physical-azure-support-matrix",

articles/site-recovery/monitor-log-analytics.md

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -36,24 +36,22 @@ We recommend that you review [common monitoring questions](monitoring-common-que
3636

3737
## Event logs available for Azure Site Recovery
3838

39-
Azure Site Recovery provides the following Resource specific and legacy tables. Each event provides detailed data on a specific set of site recovery related artifacts.
39+
Azure Site Recovery provides the following resource-specific and legacy tables. Each event provides detailed data on a specific set of site recovery related artifacts.
4040

41-
**Resource Specific tables**:
41+
**Resource-specific tables**:
4242

4343
- [AzureSiteRecoveryJobs](/azure/azure-monitor/reference/tables/asrjobs)
4444
- [Azure Site Recovery Replicated Items Details](/azure/azure-monitor/reference/tables/ASRReplicatedItems)
4545

46-
4746
**Legacy tables**:
4847

4948
- Azure Site Recovery Events
5049
- Azure Site Recovery Replicated Items
51-
- Azure Site Recovery Replication Stats
52-
- Azure Site Recovery Points
53-
- Azure Site Recovery Replication Data Upload Rate
50+
- Azure Site Recovery Replication Stats
51+
- Azure Site Recovery Points
52+
- Azure Site Recovery Replication Data Upload Rate
5453
- Azure Site Recovery Protected Disk Data Churn
55-
- Azure Site Recovery Replicated Item Details
56-
54+
- Azure Site Recovery Replicated Item Details
5755

5856
## Configure Site Recovery to send logs
5957

articles/site-recovery/monitor-site-recovery-reference.md

Lines changed: 152 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,13 +30,165 @@ Note that some of the following logs apply to Azure Backup and others apply to A
3030
[!INCLUDE [horz-monitor-ref-logs-tables](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-ref-logs-tables.md)]
3131

3232
### Recovery Services Vaults
33+
3334
Microsoft.RecoveryServices/Vaults
3435

3536
- [AzureActivity](/azure/azure-monitor/reference/tables/AzureActivity#columns)
3637
- [ASRJobs](/azure/azure-monitor/reference/tables/ASRJobs#columns)
3738
- [ASRReplicatedItems](/azure/azure-monitor/reference/tables/ASRReplicatedItems#columns)
3839
- [AzureDiagnostics](/azure/azure-monitor/reference/tables/AzureDiagnostics#columns)
3940

41+
### Event logs available for Azure Site Recovery
42+
43+
Azure Site Recovery provides the following resource-specific and legacy tables. Each event provides detailed data on a specific set of site recovery related artifacts.
44+
45+
**Resource-specific tables**:
46+
47+
- [AzureSiteRecoveryJobs](/azure/azure-monitor/reference/tables/asrjobs)
48+
- [ASRReplicatedItems](/azure/azure-monitor/reference/tables/ASRReplicatedItems)
49+
50+
**Legacy tables**:
51+
52+
- Azure Site Recovery Events
53+
- Azure Site Recovery Replicated Items
54+
- Azure Site Recovery Replication Stats
55+
- Azure Site Recovery Points
56+
- Azure Site Recovery Replication Data Upload Rate
57+
- Azure Site Recovery Protected Disk Data Churn
58+
- Azure Site Recovery Replicated Item Details
59+
60+
## Log Analytics data model
61+
62+
This section describes the Log Analytics data model for Azure Site Recover that's added to the Azure Diagnostics table (if your vaults are configured with diagnostics settings to send data to a Log Analytics workspace in Azure Diagnostics mode). You can use this data model to write queries on Log Analytics data to create custom alerts or reporting dashboards.
63+
64+
To understand the fields of each Site Recovery table in Log Analytics, review the details for the Azure Site Recovery Replicated Item Details and Azure Site Recovery Jobs tables. You can find information about the [diagnostic tables](/azure/azure-monitor/reference/tables/azurediagnostics).
65+
66+
> [!TIP]
67+
> Expand this table for better readability.
68+
69+
| Category | Category Display Name | Log Table | [Supports basic log plan](../azure-monitor/logs/basic-logs-configure.md#compare-the-basic-and-analytics-log-data-plans) | [Supports ingestion-time transformation](../azure-monitor/essentials/data-collection-transformations.md) | Example queries | Costs to export |
70+
| --- | --- | --- | --- | --- | --- | --- |
71+
| *ASRReplicatedItems* | Azure Site Recovery Replicated Item Details | [ASRReplicatedItems](/azure/azure-monitor/reference/tables/asrreplicateditems) <br> This table contains details of Azure Site Recovery replicated items, such as associated vault, policy, replication health, failover readiness. etc. Data is pushed once a day to this table for all replicated items, to provide the latest information for each item. | No | No | [Queries](/azure/azure-monitor/reference/queries/asrreplicateditems) | Yes |
72+
| *AzureSiteRecoveryJobs* | Azure Site Recovery Jobs | [ASRJobs](/azure/azure-monitor/reference/tables/asrjobs) <br> This table contains records of Azure Site Recovery jobs such as failover, test failover, reprotection etc., with key details for monitoring and diagnostics, such as the replicated item information, duration, status, description, and so on. Whenever an Azure Site Recovery job is completed (that is, succeeded or failed), a corresponding record for the job is sent to this table. You can view history of Azure Site Recovery jobs by querying this table over a larger time range, provided your workspace has the required retention configured. | No | No | [Queries](/azure/azure-monitor/reference/queries/asrjobs) | No |
73+
| *AzureSiteRecoveryEvents* | Azure Site Recovery Events | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics) | No |
74+
| *AzureSiteRecoveryProtectedDiskDataChurn* | Azure Site Recovery Protected Disk Data Churn | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
75+
| *AzureSiteRecoveryRecoveryPoints* | Azure Site Recovery Points | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
76+
| *AzureSiteRecoveryReplicatedItems* | Azure Site Recovery Replicated Items | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
77+
| *AzureSiteRecoveryReplicationDataUploadRate* | Azure Site Recovery Replication Data Upload Rate | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
78+
| *AzureSiteRecoveryReplicationStats* | Azure Site Recovery Replication Stats | [AzureDiagnostics](/azure/azure-monitor/reference/tables/azurediagnostics) <br> Logs from multiple Azure resources. | No | No | [Queries](/azure/azure-monitor/reference/queries/azurediagnostics#queries-for-microsoftrecoveryservices) | No |
79+
80+
### ASRReplicatedItems
81+
82+
This is a resource specific table that contains details of Azure Site Recovery replicated items, such as associated vault, policy, replication health, failover readiness. etc. Data is pushed once a day to this table for all replicated items, to provide the latest information for each item.
83+
84+
#### Fields
85+
86+
| Attribute | Value |
87+
|----|----|
88+
| Resource types | microsoft.recoveryservices/vaults |
89+
| Categories |Audit |
90+
| Solutions | LogManagement |
91+
| Basic log | No |
92+
| Ingestion-time transformation | No |
93+
| Sample Queries | Yes |
94+
95+
#### Columns
96+
97+
| Column Name | Type | Description |
98+
|----|----|----|
99+
| ActiveLocation | string | Current active location for the replicated item. If the item is in failed over state, the active location is the secondary (target) region. Otherwise, it is the primary region. |
100+
| BilledSize | real | The record size in bytes |
101+
| Category | string | The category of the log. |
102+
| DatasourceFriendlyName | string | Friendly name of the datasource being replicated. |
103+
| DatasourceType | string | ARM type of the resource configured for replication. |
104+
| DatasourceUniqueId | string | Unique ID of the datasource being replicated. |
105+
| FailoverReadiness | string | Denotes whether there are any configuration issues that could affect the failover operation success for the Azure Site Recovery replicated item. |
106+
| IRProgressPercentage | int | Progress percentage of the initial replication phase for the replicated item. |
107+
| IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
108+
| LastHeartbeat | datetime | Time at which the Azure Site Recovery agent associated with the replicated item last made a call to the Azure Site Recovery service. Useful for debugging error scenarios where you wish to identify the time at which issues started arising. |
109+
| LastRpoCalculatedTime | datetime | Time at which the RPO was last calculated by the Azure Site Recovery service for the replicated item. |
110+
| LastSuccessfulTestFailoverTime | datetime | Time of the last successful failover performed on the replicated item. |
111+
| MultiVMGroupId | string | For scenarios where multi-VM consistency feature is enabled for replicated virtual machines, this field specifies the ID of the multi-VM group associated with the replicated virtual machine. |
112+
| OperationName | string | The name of the operation. |
113+
| OSFamily | string | OS family of the resource being replicated. |
114+
| PolicyFriendlyName | string | Friendly name of the replication policy applied to the replicated item. |
115+
| PolicyId | string | ARM ID of the replication policy applied to the replicated item. |
116+
| PolicyUniqueId | string | Unique ID of the replication policy applied for the replicated item. |
117+
| PrimaryFabricName | string | Represents the source region of the replicated item. By default, the value is the name of the source region, however if you have specified a custom name for the primary fabric while enabling replication, then that custom name shows up under this field. |
118+
| PrimaryFabricType | string | Fabric type associated with the source region of the replicated item. Depending on whether the replicated item is an Azure virtual machine, Hyper-V virtual machine or VMware virtual machine, the value for this field varies. |
119+
| ProtectionInfo | string | Protection status of the replicated item. |
120+
| RecoveryFabricName | string | Represents the target region of the replicated item. By default, the value is the name of the target region. However, if you specify a custom name for the recovery fabric while enabling replication, then that custom name shows up under this field. |
121+
| RecoveryFabricType | string | Fabric type associated with the target region of the replicated item. Depending on whether the replicated item is an Azure virtual machine, Hyper-V virtual machine or VMware virtual machine, the value for this field varies. |
122+
| RecoveryRegion | string | Target region to which the resource is replicated. |
123+
| ReplicatedItemFriendlyName | string | Friendly name of the resource being replicated. |
124+
| ReplicatedItemId | string | ARM ID of the replicated item. |
125+
| ReplicatedItemUniqueId | string | Unique ID of the replicated item. |
126+
| ReplicationHealthErrors | string | List of issues that might be affecting the recovery point generation for the replicated item. |
127+
| ReplicationStatus | string | Status of replication for the Azure Site Recovery replicated item. |
128+
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
129+
| SourceResourceId | string | ARM ID of the datasource being replicated. |
130+
| SourceSystem | string | The agent type that collected the event. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
131+
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
132+
| TenantId | string | The Log Analytics workspace ID |
133+
| TimeGenerated | datetime | The timestamp (UTC) when the log was generated. |
134+
| Type | string | The name of the table |
135+
| VaultLocation | string | Location of the vault associated with the replicated item. |
136+
| VaultName | string | Name of the vault associated with the replicated item. |
137+
| VaultType | string | Type of the vault associated with the replicated item. |
138+
| Version | string | The API version. |
139+
140+
### AzureSiteRecoveryJobs
141+
142+
This table contains records of Azure Site Recovery jobs such as failover, test failover, reprotection etc., with key details for monitoring and diagnostics, such as the replicated item information, duration, status, description, and so on. Whenever an Azure Site Recovery job is completed (that is, succeeded or failed), a corresponding record for the job is sent to this table. You can view history of Azure Site Recovery jobs by querying this table over a larger time range, provided your workspace has the required retention configured.
143+
144+
#### Fields
145+
146+
| Attribute | Value |
147+
|----|----|
148+
| Resource types | microsoft.recoveryservices/vaults |
149+
| Categories | Audit |
150+
| Solutions | LogManagement |
151+
| Basic log | No |
152+
| Ingestion-time transformation | No |
153+
| Sample Queries | Yes |
154+
155+
#### Columns
156+
157+
| Column Name | Type | Description |
158+
|----|----|----|
159+
| _BilledSize | real | The record size in bytes |
160+
| Category | string | The category of the log. |
161+
| CorrelationId | string | Correlation ID associated with the Azure Site Recovery job for debugging purposes. |
162+
| DurationMs | int | Duration of the Azure Site Recovery job. |
163+
| EndTime | datetime | End time of the Azure Site Recovery job. |
164+
| _IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
165+
| JobUniqueId | string | Unique ID of the Azure Site Recovery job. |
166+
| OperationName | string | Type of Azure Site Recovery job, for example, Test failover. |
167+
| PolicyFriendlyName | string | Friendly name of the replication policy applied to the replicated item (if applicable). |
168+
| PolicyId | string | ARM ID of the replication policy applied to the replicated item (if applicable). |
169+
| PolicyUniqueId | string | Unique ID of the replication policy applied to the replicated item (if applicable). |
170+
| ReplicatedItemFriendlyName | string | Friendly name of replicated item associated with the Azure Site Recovery job (if applicable). |
171+
| ReplicatedItemId | string | ARM ID of the replicated item associated with the Azure Site Recovery job (if applicable). |
172+
| ReplicatedItemUniqueId | string | Unique ID of the replicated item associated with the Azure Site Recovery job (if applicable). |
173+
| ReplicationScenario | string | Field used to identify whether the replication is being done for an Azure resource or an on-premises resource. |
174+
| _ResourceId | string | A unique identifier for the resource that the record is associated with |
175+
| ResultDescription | string | Result of the Azure Site Recovery job. |
176+
| SourceFriendlyName | string | Friendly name of the resource on which the Azure Site Recovery job was executed. |
177+
| SourceResourceGroup | string | Resource Group of the source. |
178+
| SourceResourceId | string | ARM ID of the resource on which the Azure Site Recovery job was executed. |
179+
| SourceSystem | string | The agent type that collected the event. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
180+
| SourceType | string | Type of resource on which the Azure Site Recovery job was executed. |
181+
| StartTime | datetime | Start time of the Azure Site Recovery job. |
182+
| Status | string | Status of the Azure Site Recovery job. |
183+
| _SubscriptionId | string | A unique identifier for the subscription that the record is associated with |
184+
| TenantId | string | The Log Analytics workspace ID |
185+
| TimeGenerated | datetime | The timestamp (UTC) when the log was generated. |
186+
| Type | string | The name of the table |
187+
| VaultLocation | string | Location of the vault associated with the Azure Site Recovery job. |
188+
| VaultName | string | Name of the vault associated with the Azure Site Recovery job. |
189+
| VaultType | string | Type of the vault associated with the Azure Site Recovery job. |
190+
| Version | string | The API version. |
191+
40192
[!INCLUDE [horz-monitor-ref-activity-log](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-ref-activity-log.md)]
41193
- [Microsoft.RecoveryServices](/azure/role-based-access-control/permissions/management-and-governance#microsoftrecoveryservices)
42194

articles/site-recovery/monitoring-common-questions.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,9 @@ Only machines for which initial replication has completed are included in the co
5555

5656
### How long is data kept in Azure Monitor logs?
5757

58-
By default, retention is for 31 days. You can increase the period in the **Usage and Estimated Cost** section in the Log Analytics workspace. Click on **Data Retention**, and choose the range.
58+
For information on data retention, see [Data retention and archive in Azure Monitor logs](/azure/azure-monitor/logs/data-retention-archive).
59+
60+
You can modify the default retention period in the **Usage and Estimated Cost** section in the Log Analytics workspace. Click on **Data Retention**, and choose the range.
5961

6062
### What's the size of the resource logs?
6163

articles/site-recovery/report-site-recovery.md

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -40,11 +40,14 @@ To set up a Log Analytics workspace, [follow these steps](../azure-monitor/logs/
4040

4141
### Configure diagnostics settings for your vaults
4242

43-
Azure Resource Manager resources like Recovery Services vaults, record information about site recovery jobs and replicated items as diagnostics data. To configure diagnostics settings for your vaults, follow these steps:
43+
Azure Resource Manager resources, like Recovery Services vaults, record information about site recovery jobs and replicated items as diagnostics data.
4444

45-
1. On the Azure portal, navigate to the chosen the Recovery Services vault of concern
46-
1. Select **Monitoring** > **Diagnostic settings**.
47-
1. Specify the target for the Recovery Services Vault's diagnostic data. Learn more about [using diagnostic events](../backup/backup-azure-diagnostic-events.md) for Recovery Services vaults.
45+
To learn how to configure diagnostics settings, see [Diagnostic settings in Azure Monitor](/azure/azure-monitor/essentials/diagnostic-settings).
46+
47+
You can also configure diagnostics settings for your vaults using the following steps in the Azure portal.
48+
49+
1. Navigate to the chosen the Recovery Services vault, then select **Monitoring** > **Diagnostic settings**.
50+
1. Specify the target for the Recovery Services Vault's diagnostic data. Learn more about [using diagnostic events](../backup/backup-azure-diagnostic-events.md) for Recovery Services vaults.
4851
1. Select **Azure Site Recovery Jobs** and **Azure Site Recovery Replicated Item Details** options to populate the reports.
4952
:::image type="content" source="./media/report-site-recovery/logs.png" alt-text="Screenshot of logs options.":::
5053

0 commit comments

Comments
 (0)