App Insights Logging & Metrics

Writing Custodian Logs to Azure App Insights

Cloud Custodian can upload its logs to Application Insights. Each policy’s log output contains the policy name, subscription id and execution id properties. These logs will be found under the trace source in Application Insights.

Usage example using instrumentation key:

custodian run -s <output_directory> -l azure://<instrumentation_key_guid> policy.yml

Usage example using resource name:

custodian run -s <output_directory> -l azure://<resource_group_name>/<app_insights_name> policy.yml

Writing Custodian Metrics to Azure App Insights

By default, Cloud Custodian will upload the following metrics in all modes:

• ResourceCount - the number of resources that matched the set of filters

• ActionTime - the time to execute the actions.

In poll and azure-periodic mode, Cloud Custodian will also publish the following metric:

• ResourceTime - the time to query for and filter the resources,

Additionally some custom filters and actions may generate their own metrics. These metrics will be found under the customMetrics source in Application Insights.

Usage example using instrumentation key:

custodian run -s <output_directory> -m azure://<instrumentation_key_guid> policy.yml

Usage example using resource name:

custodian run -s <output_directory> -m azure://<resource_group_name>/<app_insights_name> policy.yml

In azure-periodic and azure-event-grid modes, you can configure metrics under the execution-options. Like above, you can provide the instrumentation key or the resource name.

policies:
  - name: periodic-mode-logging-metrics
    resource: azure.storage
    mode:
      type: azure-periodic
      schedule: '0 0 * * * *'
      provision-options:
        servicePlan:
          name: cloud-custodian
          location: eastus
          resourceGroupName: cloud-custodian
      execution-options:
        metrics: azure://<instrumentation_key_guid>