Question

Contoso runs 200 Windows and Linux virtual machines across three Azure regions. The operations team needs a solution that collects guest-level performance data (memory, disk, process) and Windows/Syslog events, stores it centrally for querying with KQL, and can trigger alerts when memory pressure is sustained. They want to minimize custom agent management and use the currently recommended approach. What should you recommend?

Accepted Answer

Deploy the Azure Monitor Agent (AMA) with Data Collection Rules that send guest metrics and events to a Log Analytics workspace, and configure metric/log alerts.

Answer

Enable platform metrics through the Azure Monitor host, since host-level metrics already include guest memory and process data by default.

Answer

Install the legacy Log Analytics agent (MMA) on every VM and configure workspace data sources for performance counters and events.

Answer

Route the VM Activity Log to a Log Analytics workspace and build KQL queries against the AzureActivity table for memory and process data.