OpenTelemetry Collector: diagnose telemetry drops before adding memory
A production runbook for locating telemetry loss across receivers, processors, queues and exporters, then validating capacity changes or rolling back safely.
Read article
Tag
logs
35 articles connected to this technical signal.
Azure Monitor: diagnose missing logs before changing alerts
A production runbook for qualifying missing Azure Monitor logs with Diagnostic Settings, DCRs, ingestion, KQL, cost controls, validation and rollback before changing alerts.
Read articleKQL snippet: find risky tool actions from an AI agent
A short query to isolate write-capable tool calls, their execution identity and correlation before disabling an AI agent.
Read articleKQL snippet: prepare evidence for a managed WAF rule exclusion
A short query to isolate rule, field, URI and examples before proposing a targeted WAF exclusion.
Read articleAgentOps: diagnose an AI agent action before rollback
A production runbook for qualifying an AI agent action with traces, sources, tools, identity, KQL, human validation and rollback without disabling the whole assistant.
Read articleKQL snippet: qualify a Storage Queue backlog on a private path
A short query to separate missing consumption, retries, poison messages and access errors on a private Storage Queue.
Read articleKQL snippet: diagnose Workload Identity Federation failures in CI
A short query to find federated principal sign-in failures before falling back to a client secret.
Read articleKQL snippet: spot Azure Diagnostic Settings drift
A short query to find writes, deletes and destination changes that explain a sudden disappearance of logs.
Read articleMicrosoft Foundry: evaluate an agent before giving it a production action
A runbook for validating an AI agent before real action by separating sources, tools, identity, evaluation cases, human approvals, logs and rollback.
Read articleKQL snippet: correlate APIM errors on a private API
A short query to separate subscription or key issues, private backend routing, APIM policy failure and application-side API errors.
Read articleKQL snippet: qualify an Azure Firewall denial on private egress
A short query to separate application rule denial, network rule denial and DNS proxy resolution before adding an overbroad rule.
Read articleAzure VNet Integration: diagnose outbound networking before changing the application
An operational runbook for qualifying Azure App Service or Functions outbound failures by separating VNet Integration, DNS, UDR, NSG, NAT, logs and rollback.
Read articleAgentOps: diagnose an AI agent that calls the wrong tool
A production runbook for qualifying an AI agent that selects the wrong tool, acts without evidence or hides an action behind a plausible answer.
Read articleKQL snippet: isolate Application Gateway 502s to a private backend
A short query to separate unavailable backend, application failure and WAF blocking when Application Gateway returns 502s on a private path.
Read articleAzure Service Bus: diagnose a private endpoint before touching queues
An operational runbook for Azure Service Bus private access incidents by separating DNS, Private Endpoint, identity, firewall, metrics, logs and rollback.
Read articleKQL snippet: isolate Service Bus private endpoint errors
A short query to separate missing connection evidence, identity denial, expired SAS and processing errors during a private Service Bus incident.
Read articleAzure SQL: diagnose a private endpoint before changing the database
An operational runbook for Azure SQL private access failures by separating DNS, Private Endpoint, firewall, identity, SQL logs and rollback evidence.
Read articleKQL snippet: isolate Azure SQL private endpoint errors
A short query to separate firewall, authentication, public endpoint and missing connection evidence during a private Azure SQL incident.
Read articleAzure Storage: diagnose a private endpoint without opening the account
An operational runbook for Azure Storage private access failures by separating DNS, Private Endpoint, firewall, identity, logs and rollback evidence.
Read articleKQL snippet: isolate Azure Storage 403 on a private endpoint
A short query to separate identity, firewall, public endpoint and wrong subresource when private Azure Storage access is denied.
Read articleAzure App Service: diagnose a private endpoint before redeploying
Build an operational runbook for App Service private access failures by separating DNS, Private Endpoint, access restrictions, Application Gateway, application logs and rollback evidence.
Read articleKQL snippet: correlate private App Service and Application Gateway
A short query to separate WAF, gateway, private DNS, access restrictions and App Service logs during a private access incident.
Read articleAzure Functions: diagnose a private HTTP endpoint before changing code
Build an operational runbook for private Azure Functions failures by separating DNS, Private Endpoint, access restrictions, private storage, Application Insights logs and rollback evidence.
Read articleKQL snippet: correlate an Azure Functions private HTTP endpoint
A short query to separate DNS, private access, Functions runtime and application exceptions during a private HTTP incident.
Read articleAzure AKS: diagnose private ingress before changing deployments
Build an operational runbook for AKS private ingress failures by separating DNS, Application Gateway, ingress controller, Kubernetes service endpoints, pod readiness and rollback evidence.
Read articleKQL snippet: correlate AKS private ingress and application logs
A short query to read ingress controller and application logs together when a private AKS route returns 502, timeouts or no endpoints.
Read articleAzure Container Apps: diagnose private ingress before changing revisions
Build an operational runbook for Azure Container Apps private ingress failures by separating DNS, ingress mode, revision routing, application logs and rollback evidence.
Read articleKQL snippet: diagnose Container Apps private ingress and revisions
A short query to correlate Azure Container Apps system and console logs when private ingress, probes or revision traffic fail.
Read articleAzure internal APIM: diagnose a private API before changing policies
Qualify a failure across Application Gateway, WAF, internal APIM and a private backend by separating DNS, routing, policy, identity and logs before any fix.
Read articleKQL snippet: correlate WAF and APIM on an Azure private API
A short query to see whether a private API request is blocked by Application Gateway WAF, received by APIM or missing from the expected path.
Read articleAzure managed identity: diagnose private access before changing permissions
Build a runbook for Key Vault, Storage or private API access failures with managed identity, RBAC, private DNS, logs and real execution evidence.
Read articleKQL snippet: diagnose Key Vault denial with managed identity
A short query to separate identity denial, network path and source address when an Azure workload can no longer access Key Vault.
Read articleService identity and secret rotation: a production runbook, not an isolated task
Build operable rotation for secrets, certificates, and application identities with dependency inventory, evidence, change windows, monitoring, and rollback.
Read articleKQL snippet: detect authentication errors after secret rotation
A short query to watch 401, 403, and 500 errors after rotating an application secret or service identity.
Read articlePrivate-network AI agent: which controls to keep around data, actions and logs
Design a private AI agent with technical guardrails around internal sources, triggered actions, identities, logs, human validation and network boundaries.
Read article