Search Azure terms

Monitoring and Observability premium Action group An Azure Monitor action group defines who gets notified and which actions run when an alert fires. It can include notification receivers such as email, SMS, and push, plus automation actions such as webhooks, secure webhooks, Azure Functions, Logic Apps, runbooks, ITSM, or Event Hubs. Alerts fundamentals 5 commands Aliases: Azure Monitor action group, alert action group, monitor action group Quick peek Open full term page

Web premium App Service diagnostics Built-in App Service troubleshooting tools and detectors that help diagnose availability, performance, configuration, networking, and runtime problems. It helps learners understand where the concept appears in Azure operations and what to verify before changing it. App Service intermediate 5 commands Aliases: app service diagnostics, diagnostics Quick peek Open full term page

Monitoring and Observability premium Azure Resource Health Azure Resource Health reports current and past health for individual Azure resources and helps diagnose service-impacting problems. Operational hygiene fundamentals 5 commands Aliases: Azure Resource Health, Azure resource health status, Resource Health, resource availability status Quick peek Open full term page

Analytics premium Databricks workflow A Databricks workflow is a scheduled or triggered orchestration of tasks in Azure Databricks, commonly managed through Lakeflow Jobs, for running notebooks, SQL, pipelines, scripts, and production data workloads. Data engineering and analytics intermediate 5 commands Aliases: Databricks Jobs workflow, Lakeflow Jobs workflow, Databricks scheduled workflow, Databricks orchestration Quick peek Open full term page

Security premium Incident Incident is a security or operational case that groups alerts, entities, evidence, investigation notes, and response actions around a potential issue. SIEM and SOAR fundamentals 5 commands Aliases: Incident, incident Quick peek Open full term page

Monitoring and Observability premium KQL KQL controls how operators search telemetry, detect incidents, investigate performance, build dashboards, create alerts, and summarize operational evidence across Azure services. Teams see it in log analytics workspaces, azure monitor logs. It is not SQL, PromQL, OData filters, ARM template expressions, Azure Data Factory expression language, or application code; confusing them can create missed incidents, expensive queries. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior. Query language Fundamentals 5 commands Aliases: Kusto Query Language, Kusto query, Azure Monitor query language, Sentinel query language Quick peek Open full term page

Analytics premium Kusto function Kusto function is a reusable KQL query or query fragment, stored as a database entity or defined ad hoc, that standardizes analytics logic. Kusto query objects Intermediate 5 commands Aliases: Kusto stored function, ADX stored function, KQL function Quick peek Open full term page

Monitoring and Observability premium Platform metrics Platform metrics are numeric measurements that Azure resources emit and Azure Monitor collects at regular intervals. They describe resource health, capacity, utilization, latency, throughput, failures, and dimensions over time, helping operators chart behavior, create alerts, and diagnose service conditions quickly. Monitoring fundamentals 5 commands Aliases: Azure platform metrics, Azure Monitor platform metrics, resource metrics Quick peek Open full term page

Management and Governance premium Policy event A policy event is a record or notification that something changed in Azure Policy evaluation. It can tell you that a resource became compliant, became non-compliant, or had a policy state created or removed. Instead of waiting for someone to refresh a portal report, teams can query policy events or route state-change events through Event Grid. For operators, this makes policy activity visible close to the time it happens, so compliance changes can trigger alerts, tickets, evidence capture, or remediation workflows. Azure Policy intermediate 5 commands Aliases: Policy event, policy-event Quick peek Open full term page

Databases premium PostgreSQL log analytics PostgreSQL log analytics means collecting PostgreSQL flexible server logs in Azure Monitor so operators can search them, build alerts, and investigate problems with KQL. Instead of downloading log files manually or guessing from symptoms, teams route PostgreSQLLogs and related categories to a Log Analytics workspace. The value comes from patterns: failed connections, slow queries, audit events, PgBouncer signals, configuration effects, and workload changes. It is not free and not automatically useful; teams must choose categories, retention, workspace access, alert logic, and dashboards that match the database risk. PostgreSQL flexible server fundamentals 5 commands Aliases: PostgreSQL log analytics, postgresql log analytics, Azure Database for PostgreSQL flexible server Quick peek Open full term page

Monitoring and Observability premium Service Health alert A Service Health alert is an Azure Monitor activity log alert that watches ServiceHealth events for selected subscriptions, regions, and services. It routes incident, planned maintenance, security, or health advisory notifications to action groups so teams learn about platform issues before users report symptoms. Operational hygiene intermediate 5 commands Aliases: Azure Service Health alert, Service Health alert, ServiceHealth activity log alert, platform health alert, service health alert, service-health-alert Quick peek Open full term page

Analytics premium Tumbling window In Azure Stream Analytics, a tumbling window groups events into fixed-size, non-overlapping, contiguous time intervals. Each event belongs to only one window, making the function useful for periodic aggregations such as counts, averages, totals, or alerts over live streaming data. Stream Analytics intermediate 5 commands Aliases: TumblingWindow, TUMBLINGWINDOW, tumbling window function, fixed non-overlapping window Quick peek Open full term page

Monitoring and Observability premium Activity Log alert Activity Log alert is an Azure Monitor alert rule that fires when an Activity Log event matches defined conditions. In everyday Azure work, teams use it to notify responders when important Azure control-plane events happen, such as resource deletion, service health events, or privileged changes. The useful evidence is scope, condition fields, action group, enabled Azure Monitor alerts intermediate 4 commands Aliases: Azure Activity Log alert, management event alert, control-plane alert Quick peek Open full term page

Databases premium Advanced threat protection for SQL Advanced threat protection for SQL is the Defender for SQL capability that detects anomalous and potentially harmful database activity. In everyday Azure work, teams use it to surface SQL injection attempts, unusual access, unfamiliar principals, suspicious applications, or brute-force credential patterns. The useful evidence is Defender plan state, server or database protection setting, alert recipient, Azure SQL intermediate 4 commands Aliases: SQL Advanced Threat Protection, Azure SQL threat detection, Defender for SQL ATP, ATP for Azure SQL Quick peek Open full term page

Monitoring premium Application Insights Application Insights is the application performance monitoring capability in Azure Monitor. It collects OpenTelemetry or SDK telemetry such as requests, dependencies, exceptions, traces, metrics, and availability results so teams can continuously understand live application health, performance, failures, and user-impacting behavior. Application observability fundamentals 4 commands Aliases: Azure Application Insights, App Insights, Azure Monitor Application Insights, application performance monitoring, APM Quick peek Open full term page

Monitoring and Observability premium Availability test Availability test is an outside-in monitor that repeatedly calls a public HTTP or HTTPS endpoint and records whether it responded quickly enough. In Azure, teams encounter it when product teams need synthetic checks for websites, APIs, or critical external dependencies before users report an outage. The useful question is what behavior it proves, who owns Availability intermediate 4 commands Aliases: Application Insights availability test, web test, standard test, synthetic test Quick peek Open full term page

Management and Governance premium Budget alert A budget alert is the notification Azure creates when spending or usage reaches a configured budget threshold. Cost Management fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Analytics premium Data Factory monitoring The operational view of Data Factory pipeline runs, activity runs, trigger history, integration runtime health, metrics, logs, and alerts. Data integration and orchestration Intermediate 4 commands Aliases: Data Factory monitoring, ADF monitoring, data factory monitoring Quick peek Open full term page

Storage premium File share quota File share quota is the configured capacity limit for an Azure Files share, expressed in GiB and interpreted by the share billing model in Azure. Azure Files intermediate 4 commands Aliases: File share quota, file share quota Quick peek Open full term page

Monitoring and Observability premium Log Analytics table A Log Analytics table is the named storage structure inside a Log Analytics workspace that holds one kind of Azure Monitor log record, with its own schema, plan, retention behavior, access considerations, and KQL query patterns for troubleshooting, analytics, and compliance. Azure Monitor Logs fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Monitoring and Observability premium Log Analytics workspace A Log Analytics workspace is the Azure Monitor Logs data store where collected log records are retained, secured, queried with KQL, and used by alerts, workbooks, Microsoft Sentinel, Application Insights, and operations teams to troubleshoot and govern Azure workloads in governed production environments. Azure Monitor Logs fundamentals 4 commands Aliases: workspace, LAW Quick peek Open full term page

Monitoring and Observability premium Metric alert Metric alert is an Azure Monitor alert rule that watches one or more metrics and triggers action when the configured condition is met. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. Azure Monitor Alerts advanced 4 commands Aliases: Azure Monitor metric alert, metric alert rule, metric-based alert Quick peek Open full term page

Monitoring and Observability premium Alert processing rule An alert processing rule is an Azure Monitor rule that modifies fired alerts, such as adding or suppressing action groups, applying filters, or using schedules without changing the alert rule itself. Azure Monitor Alerts fundamentals 3 commands Aliases: Azure Monitor alert processing rule, notification suppression rule, alert action rule Quick peek Open full term page

Monitoring and Observability premium Alert rule An alert rule is Azure Monitor configuration that watches a scope and signal, evaluates conditions, and creates alert instances when metric, log, activity, resource health, service health, or Prometheus criteria are met. Azure Monitor Alerts advanced 3 commands Aliases: Azure Monitor alert rule, monitoring rule, metric alert rule, log alert rule Quick peek Open full term page

Security premium Analytic rule An analytic rule is a Microsoft Sentinel detection rule that turns scheduled, near-real-time, Microsoft security, machine learning, or threat intelligence logic into alerts and incidents. Microsoft Sentinel intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Monitoring and Observability premium Azure Monitor Azure Monitor is Microsoft’s unified observability service for collecting, analyzing, and acting on telemetry from Azure, hybrid, and application workloads. It brings together metrics, logs, traces, events, alerts, workbooks, and Application Insights capabilities so teams can understand health, performance, and reliability. Monitoring fundamentals 3 commands Aliases: Azure Monitor, Monitor, Azure observability, Log Analytics, Application Insights, Azure metrics and logs Quick peek Open full term page

Integration premium Correlation filter A integration pattern or service capability in Messaging that helps teams connect services reliably without tightly coupling every component with clearer ownership, safety, and operational context. Messaging fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Approximate message count Approximate message count is the queue-depth estimate you use when checking whether an Azure Storage queue is backing up, draining normally, or ready for scale decisions. It is not a perfect inventory of every message; it is a practical signal for operations. Teams use it to decide whether workers are falling behind, whether a. Queue Storage fundamentals 2 commands Aliases: ApproximateMessagesCount, Queue approximate message count, x-ms-approximate-messages-count, Queue depth estimate Quick peek Open full term page

Security premium Certificate A certificate is an X.509 object used for TLS, authentication, or cryptographic operations. Secrets and keys fundamentals 2 commands Aliases: No aliases yet Quick peek Open full term page

Analytics field-manual-complete Late arrival policy A late arrival policy in Azure Stream Analytics defines how events are handled when their event timestamp is older than their arrival time beyond the configured late-arrival tolerance. Microsoft Learn describes late and out-of-order behavior, including dropping events or adjusting timestamps when TIMESTAMP BY is used. Streaming analytics intermediate 10 commands Aliases: No aliases yet Quick peek Open full term page

Web verified Requests in application queue Requests In Application Queue is an Azure Monitor metric for Microsoft.Web/sites that reports how many Web App or Function App requests are waiting in the application request queue. It helps diagnose saturation, slow handlers, cold starts, thread exhaustion, or delayed scale-out. Web App metric intermediate 6 commands Aliases: RequestsInApplicationQueue, App Service application queue, HTTP requests in application queue, Web App request queue metric, Function App request queue metric Quick peek Open full term page

Management and Governance verified Resource abbreviation Resource abbreviation recommendations in the Cloud Adoption Framework provide short examples mapped to Azure resource types and provider namespaces. Teams use them in naming conventions to keep names readable, consistent, and within resource length limits while still showing what each resource is. Tags and naming fundamentals 6 commands Aliases: Azure resource abbreviation, CAF resource abbreviation, naming abbreviation, resource type prefix, Azure naming prefix Quick peek Open full term page

Analytics verified Windowing function A windowing function in Azure Stream Analytics defines time boundaries for processing continuous events. Tumbling, hopping, sliding, session, and snapshot windows let queries aggregate, join, and detect patterns across event-time periods instead of evaluating each incoming event as a standalone record. Stream Analytics intermediate 6 commands Aliases: Stream Analytics windowing function, temporal window, streaming window, Azure Stream Analytics window Quick peek Open full term page

Monitoring verified Workbook An Azure Monitor workbook is an interactive Azure portal report that combines text, metrics, logs, parameters, links, and visualizations. Workbooks can query multiple Azure data sources, support troubleshooting and governance views, and are often shared as reusable monitoring templates for teams. Azure Monitor fundamentals 6 commands Aliases: Azure Monitor workbook, Azure workbook, monitoring workbook, interactive workbook Quick peek Open full term page

Web field-manual-complete App Service log stream App Service log stream is the live tail for an App Service app. App Service diagnostics intermediate 5 commands Aliases: Azure App Service log stream, app service log stream Quick peek Open full term page

Integration verified Request trigger In Azure Logic Apps, the Request built-in trigger starts a workflow when an HTTPS request reaches its generated endpoint. It can validate an optional JSON schema, expose a callback URL, and pair with a Response action when the workflow needs to behave like an API. securely. Logic Apps intermediate 5 commands Aliases: Logic Apps Request trigger, When an HTTP request is received, HTTP request trigger, request-based trigger, callable workflow endpoint Quick peek Open full term page

Management and Governance verified Resource drift Resource drift is the gap between the intended Azure configuration in code, policy, or design and the resource state that actually exists after manual changes or unmanaged deployments. Operational hygiene intermediate 5 commands Aliases: Azure resource drift, infrastructure drift, configuration drift, IaC drift, deployment drift Quick peek Open full term page

Management and Governance verified Resource name A resource name is the name you give an Azure resource, such as a storage account, virtual network, key vault, web app, or database. It is not the same as the full resource ID. The name is only one part of that ID, but it is what humans see first in portals, logs, scripts, alerts, and cost reports. Naming matters because different resource types have different length, character, uniqueness, DNS, and rename rules. That makes naming a permanent architecture decision in many services. Azure Resource Manager fundamentals 5 commands Aliases: Azure resource name, Resource naming Quick peek Open full term page

Analytics field-manual-complete Stream Analytics query A Stream Analytics query is the logic that turns incoming events into useful results. It looks like SQL, but it is built for streams, time windows, late events, joins, reference data, and continuous output. The query decides what fields to keep, what events to filter, how to group data, and where each result goes. For operators, a query is not just code; it is production behavior that can change alerts, dashboards, and records within seconds. Streaming analytics fundamentals 5 commands Aliases: Stream Analytics query, ASA query, Stream Analytics SQL query, streaming query, ASAQL query Quick peek Open full term page

Analytics field-manual-complete Stream Analytics windowing function A Stream Analytics windowing function lets you ask questions about events over time instead of one event at a time. You might count transactions every minute, average machine temperature over five minutes, detect user activity sessions, or compare current values with a snapshot. The window defines which events belong together before the query aggregates them. Choosing the wrong window can make alerts noisy, late, or misleading, so it is one of the most important design choices in a streaming query. Streaming analytics fundamentals 5 commands Aliases: Azure Stream Analytics windowing function, ASA window function, temporal window, streaming window function Quick peek Open full term page

Analytics field-manual-complete Streaming ingestion Streaming ingestion is the path that gets fresh events into Azure Data Explorer quickly, often within seconds, instead of waiting for larger batch ingestion cycles. It is useful for operational telemetry, logs, alerts, and near-real-time analytics where people need to query the newest data quickly. It is not the best answer for every high-volume table; queued ingestion may be better for large sustained loads. The practical decision is latency versus throughput efficiency, table design, mapping quality, and operational cost. Azure Data Explorer intermediate 5 commands Aliases: Azure Data Explorer streaming ingestion, ADX streaming ingestion, Kusto streaming ingestion, low latency ingestion Quick peek Open full term page

AI and Machine Learning field-manual-complete Translator Azure Translator in Foundry Tools is a cloud-based neural machine translation service for building multilingual applications. It translates text and documents across supported languages through REST APIs and SDKs, and it can use custom translation systems for terminology, domain language, and workflow-specific localization. AI platform and search intermediate 5 commands Aliases: Azure Translator, Azure AI Translator, Text Translation, machine translation, document translation Quick peek Open full term page

Security verified Watchlist A Microsoft Sentinel watchlist is a named set of reference data, usually uploaded from CSV or storage, that analysts use in KQL queries, analytics rules, hunting, workbooks, notebooks, and investigations to enrich, filter, correlate, or prioritize security events at scale. SIEM and SOAR fundamentals 5 commands Aliases: Microsoft Sentinel watchlist, Sentinel reference data list, watchlist alias, KQL watchlist lookup Quick peek Open full term page

Analytics verified Window function A window function in Azure Stream Analytics groups streaming events into time-based windows so queries can aggregate data across bounded periods. Tumbling, hopping, sliding, session, and snapshot windows let jobs calculate counts, averages, or patterns over event-time intervals rather than treating every event as isolated. Stream Analytics intermediate 5 commands Aliases: Stream Analytics window function, windowing function, temporal window, TumblingWindow, HoppingWindow Quick peek Open full term page

Monitoring and Observability verified Workspace retention Workspace retention defines how long Log Analytics data remains available for analytics and how long it is kept in long-term retention. Retention can be configured at workspace and table levels, affecting query availability, search jobs, compliance evidence, incident review, and Azure Monitor storage cost before data is deleted. Logs fundamentals 5 commands Aliases: Log Analytics retention, Workspace data retention, Azure Monitor Logs retention, Table retention Quick peek Open full term page

Management and Governance complete Showback A FinOps reporting practice that shows Azure consumption to accountable teams without directly billing them. Cost Management fundamentals 5 commands Aliases: cost showback, cloud showback, FinOps showback, showback reporting Quick peek Open full term page

Databases complete SQL Agent on Managed Instance Microsoft Learn explains that SQL Server Agent executes SQL Agent jobs for task automation in Azure SQL Managed Instance. A job is a specified series of T-SQL scripts against a database, used to run administrative tasks one or more times and monitor success or failure. Azure SQL Managed Instance intermediate 5 commands Aliases: SQL Agent on Managed Instance, sql agent on managed instance, sql-agent-on-managed-instance Quick peek Open full term page

Databases complete SQL threat detection Microsoft Learn describes SQL threat detection, through Advanced Threat Protection in Microsoft Defender for SQL, as detecting anomalous and potentially harmful attempts to access or exploit databases. It can alert on suspicious database activity, possible vulnerabilities, SQL injection, unusual access, and abnormal query patterns. Azure SQL security monitoring intermediate 5 commands Aliases: Advanced Threat Protection for SQL, Microsoft Defender for SQL alerts, Azure SQL Advanced Threat Protection, SQL security alerts Quick peek Open full term page

Storage complete Storage account metrics Microsoft Learn lists storage account metrics as Azure Monitor measurements for Microsoft.Storage accounts. They expose signals such as availability, transactions, capacity, latency, ingress, egress, errors, and service-level dimensions so operators can watch storage behavior, alert on problems, and trend usage over time. Storage accounts advanced 5 commands Aliases: Azure Storage metrics, storage metrics, storage account Azure Monitor metrics, Microsoft.Storage metrics Quick peek Open full term page

App and integration services field-manual-complete Notification Hubs Azure Notification Hubs is the Azure service teams use to send push notifications to mobile apps and connected devices. Instead of every backend talking separately to Apple, Google, or other platform notification systems, the app registers devices with a hub and the backend sends messages through that hub. It is useful for alerts, reminders, promotions, operational updates, and personalized messages. Notification Hubs does not replace the mobile app or messaging strategy; it provides the scalable push delivery layer behind them. Mobile messaging intermediate 4 commands Aliases: Azure Notification Hubs Quick peek Open full term page