Azure Monitor
Connect an Azure Monitor Log Analytics workspace to TraceX with an Entra ID app registration that has Log Analytics Reader.
Search a Log Analytics workspace in Azure Monitor with an app registration.
Why connect Azure Monitor
Section titled “Why connect Azure Monitor”Logs are where a failure leaves its trail: the timeouts, the retries, the request that returned a 500. Without them, TraceX can tell you what the data looks like but not always what happened. With Azure Monitor connected it can see the failure itself, how often it happened and exactly when it started, which is often the strongest evidence in a report.
Before you start
Section titled “Before you start”- In Microsoft Entra ID → App registrations, register an app (for example
tracex-logs). - Under Certificates & secrets, create a client secret and copy its value.
- In the Log Analytics workspace, Access control (IAM) → Add role assignment → Log Analytics Reader → the app.
Connect
Section titled “Connect”Open Integrations → Azure Monitor and fill in:
| Field | Value |
|---|---|
| Directory (tenant) id | from the app registration |
| Application (client) id | from the app registration |
| Client secret | the secret value |
| Workspace id | the Log Analytics workspace id |
TraceX checks the credentials with a real read, then stores them encrypted.
How TraceX uses it
Section titled “How TraceX uses it”While investigating, and in Conversations, TraceX searches your logs in two ways:
- around the time the problem started, to see what changed in the log stream;
- for the identifiers in the issue: a customer, an order, a request id, an error message.
Thousands of log lines are hard to read, so TraceX groups them into patterns with
counts, errors first. A burst of the same failure, such as 1,240 ×
PaymentGatewayTimeout since 09:02, stands out immediately, and the report links to
example lines.
Example
Section titled “Example”Customers in the EU can’t upload files since 14:30.
TraceX searches for errors from the upload service after 14:00, groups them, and
finds 3,812 × AccessDenied: s3:PutObject starting at 14:27, right after a deploy that
changed the bucket policy. The report cites example log lines and the change.
Troubleshooting
Section titled “Troubleshooting”| Problem | What to check |
|---|---|
| The credential check fails | The key or token needs read access to logs; check the scope or role listed above and that it hasn’t expired. |
| Searches return nothing | Check the region or site, and that the log groups, index or filter you entered contain the service’s logs. |
| Logs are found but not the right ones | Narrow the filter (log groups, index pattern, stream selector) to production services. |
Remove access
Section titled “Remove access”Disconnect Azure Monitor in Integrations, then revoke the key or credentials on the Azure Monitor side.