Microsoft Sentinel: validate a watchlist before it drives automated response
A production runbook for proving watchlist freshness, schema, SearchKey, deletions and KQL behavior before allowing it to influence automated response.
Read article
Tag
canary
15 articles connected to this technical signal.
Azure AKS: diagnose HPA oscillation before raising replica limits
A production runbook for separating noisy metrics, miscalibrated requests, slow startup and node capacity before changing Horizontal Pod Autoscaler bounds on AKS.
Read articleAzure Service Bus: diagnose message-lock loss before extending auto-renewal
A production runbook for separating processing time, connection loss, renewal failure and late settlement before extending an Azure Service Bus message lock.
Read articleAzure Network Watcher: diagnose an intermittent path before changing NSG or UDR
A production runbook for turning intermittent Azure connectivity into continuous evidence with Connection Monitor, then isolating DNS, routing, filtering and service health before changing network policy.
Read articleAzure DevOps: prove artifact provenance before production promotion
A production runbook for tying an Azure DevOps artifact to its source, build run, digest and approval before promotion, quarantine or rollback.
Read articleAzure Monitor: contain log alert fan-out before changing the KQL rule
A production runbook for measuring split-by dimension cardinality, containing notification noise, canarying stable grouping and rolling back an Azure Monitor log alert without losing coverage.
Read articleAzure Automation: prove the published version before running a runbook
A production runbook for tying source commit, sync job, draft, published version, no-effect test and rollback together before allowing Azure Automation to act.
Read articleAzure Firewall IDPS: validate a signature before switching it to deny
A production runbook for qualifying an Azure Firewall IDPS signature in alert mode, measuring impact, canarying deny and retaining a targeted rollback.
Read articleAzure Virtual WAN: validate Routing Intent before enforcing production inspection
A production runbook for qualifying Azure Virtual WAN Routing Intent across private flows, internet egress, effective routes, Azure Firewall, canaries, validation and rollback.
Read articleOpenTelemetry Collector: validate tail sampling before losing incident traces
A production runbook for qualifying OpenTelemetry tail sampling across trace affinity, late spans, memory pressure, policy coverage, Azure Monitor evidence, canary rollout and rollback.
Read articleAzure Automation: validate a runtime migration before cutting production runbooks over
A production runbook for qualifying a new Azure Automation runtime environment across versions, packages, Hybrid Workers, no-effect tests, canary execution, validation and rollback.
Read articleAzure API Management: validate a shared policy fragment before production rollout
A production runbook for inventorying references, versioning an APIM policy fragment, testing it on a canary API revision, correlating traces and deciding promotion or rollback.
Read articleAzure Monitor: roll out a DCR transformation without losing telemetry
A production runbook for canarying a KQL transformation in an Azure Monitor Data Collection Rule, comparing volume and schema, detecting rejected records, then validating or rolling back without an observability gap.
Read articleTerraform: upgrade a provider without uncontrolled drift
A production runbook for qualifying a Terraform provider upgrade with a lockfile, baseline plan, canary, operational evidence and an explicit rollback.
Read articleAzure Route Server: validate a BGP advertisement before production propagation
A production runbook for bounding a BGP change, comparing learned and advertised routes, checking effective routes, canarying one prefix, then validating or withdrawing it without destabilizing the Azure hub.
Read article