Recommendation to connect Log Analytic Workspace to AKS

Andy Lim 20 Reputation points
2024-08-12T14:10:37.8433333+00:00

We would like to know the best practices or recommendation to connect Azure Monitor to AKS. Currently, we setup AKS, Azure Monitor with AMPLS and we configured the ContainerInsight via both ConfigMap and DCR method.

We would like to know the best recommendation. Should we use either DCR or ConfigMap if we were to choose one, and what's the trade-off? What is the precedence of the setup if we have to use both?

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,196 questions
Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
502 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,073 questions
0 comments
Accepted answer
  1. Sina Salam 10,036 Reputation points
    2024-08-12T20:36:28.2433333+00:00

    Hello Andy Lim,

    Welcome to the Microsoft Q&A and thank you for posting your questions here.

    I understand that you would like to know more about the best practices and considerations for integrating Azure Monitor with Azure Kubernetes Service (AKS) using both the Data Collection Rules (DCR) method and the ConfigMap method.

    DCR and ConfigMap have Pros and Cons, major differences are the followings:

    DCR ConfigMap
    Granular Control Direct Control
    Central Management and Modern Simplicity

    If both methods are used, the precedence typically depends on how the monitoring agents are configured and deployed. However, in general:

    DCR Configurations usually take precedence as they are centrally managed by Azure Monitor and might override or complement configurations specified in ConfigMaps. So, therefore, if ConfigMaps are used to configure specific agents or monitoring settings, they might still be active but could be overridden by the DCR settings if there is a conflict.

    To avoid confusion and ensure consistency: It’s best to avoid using both methods simultaneously for the same purpose to prevent conflicts and unpredictable behavior. Given that DCR is the modern and recommended approach, consider transitioning fully to DCR if possible. This will streamline management and align with best practices.

    For more reading about Azure Monitor best practices for Kubernetes, kindly use the additional resources available by the right side of this page. Especially, the followings:

    Accept Answer

    I hope this is helpful! Do not hesitate to let me know if you have any other questions.

    ** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful ** so that others in the community facing similar issues can easily find the solution.

    Best Regards,

    Sina Salam

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.