Azure Monitoring Agent
Monitor your entire Azure cloud estate—without granting everyone Azure portal access. Nodinite Azure Monitoring Agent empowers IT teams and business stakeholders to detect, troubleshoot, and resolve Azure service issues from one unified platform—with role-based security, instant alerts, and remote actions built in.
Why Teams Choose This Agent
Managing Azure services at enterprise scale creates operational challenges that slow down teams and increase risk:
- 🔐 Security Risk from Broad Access – Granting Azure portal access to help desk, support teams, or business users means handing out contributor/reader roles across subscriptions—exposing sensitive resources and creating audit nightmares
- 🧩 Fragmented Monitoring – Azure Monitor, Application Insights, Storage Analytics, Event Hub metrics—each service has its own dashboard, forcing teams to context-switch constantly
- 📧 Alert Fatigue – Azure sends emails or calls webhooks, but doesn't correlate issues, delegate remediation, or integrate with your existing operational workflows
- 🔍 No Self-Service for Non-Technical Users – Business users, customer success teams, and operations need to check Web Job status, queue depths, or Function executions—but can't navigate the Azure portal safely
- ⏱️ Slow Troubleshooting – Support teams open tickets, wait for Azure admins to investigate, then manually restart services or clear queues—wasting critical minutes during incidents
- 💸 High Cost of Sprawl – Multiple subscriptions, resource groups, and regions mean deploying monitoring infrastructure repeatedly—Azure Monitor costs scale linearly with resources
The Nodinite Azure Monitoring Agent solves this by providing unified monitoring, role-based delegation, and instant remote actions across all your Azure subscriptions—without requiring Azure portal access:
✅ Monitor 15+ Azure EAI service types from one agent – Functions, Web Jobs, Storage (Blobs/Queues/Files), Event Hubs, API Management, Key Vault, Container Apps, Data Factory, and more
✅ Delegate safely with role-based access – Let help desk restart Web Jobs, business users check queue depths, operations clear storage—without granting Azure contributor roles
✅ Receive proactive alerts before users complain – Queue backlog thresholds, Function failures, API latency spikes, certificate expiration, Key Vault access anomalies
✅ Fix problems instantly from your web browser – One-click remote actions: restart Web Jobs, purge queues, trigger Functions, clear Blob containers—no Azure CLI or PowerShell required
✅ One agent, unlimited subscriptions – Monitor hundreds of subscriptions, resource groups, and regions with a single agent installation—no per-subscription licensing
✅ Auto-discover new resources – As you deploy new Functions, Web Jobs, or Storage accounts, Nodinite automatically detects and monitors them
What You Can Monitor
The Azure Monitoring Agent provides comprehensive coverage of Azure cloud services organized by subscription and resource group:
The agent connects to Azure subscriptions and automatically discovers resources organized by resource groups—supporting unlimited subscriptions with a single agent installation.
Azure Service Coverage
Monitor 15+ Azure service types across unlimited subscriptions and resource groups. Click any service below for detailed monitoring capabilities:
| Service | What You Can Monitor | Key Capabilities | |
|---|---|---|---|
| Subscription | Subscription health, quota usage, service limits | Auto-discover resources, track consumption | |
| Resource Group | Resource group health, deployment status, cost allocation | Organize monitoring by business unit or environment | |
| Azure Functions | Execution count, failures, duration, memory usage | Kusto query-based monitoring via Application Insights | |
| Web Jobs | Job status (running, stopped, failed), execution history, logs | Continuous and triggered job monitoring | |
| App Services / Web Apps | Availability, response time, HTTP status codes, worker processes | Monitor production web applications | |
| Storage - Blobs | Container health, blob count, storage size, access patterns | Track data lake and backup storage | |
| Storage - Queues | Queue depth, message age, dequeue rate, poison messages | Prevent queue backlog and integration failures | |
| Storage - Files | File share capacity, file count, access metrics | Monitor file-based integrations | |
| Event Hubs | Incoming/outgoing messages, consumer lag, throughput, partition health | Real-time event streaming health | |
| Event Grid Topics | Topic health, event delivery success/failure rates, subscriptions | Event-driven architecture monitoring | |
| Key Vault | Secret expiration, certificate validity, key rotation, access audits | Security and compliance tracking | |
| API Management | API availability, latency, request count, error rates, backend health | Gateway and API endpoint monitoring | |
| Application Insights | Custom telemetry, traces, exceptions, dependencies | Deep application performance monitoring | |
| App Registration | Client secret expiration, certificate validity, federated credentials, scopes | Identity and access management monitoring | |
| Certificates | Expiration dates, validity periods, issuer, subject | Prevent service disruptions from expired certs | |
| Container Apps | Container health, replica count, CPU/memory usage, ingress traffic | Cloud-native container monitoring | |
| Data Factory | Pipeline runs, activity failures, trigger status, integration runtime health | Data integration and ETL monitoring |
Tip
Complete feature reference: See the Azure Monitoring Features Overview for detailed documentation on every service type, monitoring metric, and remote action.
| Share and Delegate | Save Time | Save Money |
|---|---|---|
| Provide self-service access for business and stakeholders without granting Azure portal roles | Enable help desk and operations to resolve problems quickly, reducing MTTR and downtime | One Nodinite license monitors unlimited Azure subscriptions—no per-subscription monitoring costs |
Complementary Azure Monitoring Agents
For specialized Azure services, Nodinite offers dedicated monitoring agents:
- Azure Logic Apps – Monitor Logic App workflows, runs, triggers, and connectors (separate agent with logging capabilities)
- Azure Service Bus – Queue depth, topic subscriptions, dead-letter messages (part of Message Queueing agent)
- Azure SQL Databases – Query performance, blocking, backup status, DTU usage (part of Database agent)
- Dynamics 365 – CRM entity monitoring, plugin failures, workflow health (dedicated agent)
- Web Services – Monitor any HTTP/HTTPS endpoint including Azure-hosted APIs (generic agent)
These specialized agents complement the Azure Monitoring Agent for complete Azure coverage.
What You Can Do
Unified Cloud Monitoring Across All Subscriptions
Monitor unlimited Azure subscriptions with one agent—no per-subscription licensing, no repeated deployments. The Azure Monitoring Agent supports multiple subscriptions with different Azure App Registrations (Service Principals), different regions, and different access credentials—all managed from one Nodinite instance.
Auto-discovery of new resources: As your teams deploy new Functions, Web Jobs, Storage accounts, Event Hubs, or API Management services, Nodinite automatically detects them within configured Subscriptions and Resource Groups—no manual configuration required.
Multi-region support: Monitor Azure resources across all Azure regions (global, government, China) from a single agent installation.
Proactive Alerts & Intelligent Monitoring
Receive instant alerts when Azure services breach thresholds or fail—before your users notice:
- Azure Functions – Execution failures, timeout errors, memory pressure, cold start delays (via Application Insights Kusto queries)
- Web Jobs – Job failures, missed schedules, continuous jobs stopped unexpectedly
- Storage Queues – Queue depth exceeds threshold, poison message detection, dequeue rate drops
- Storage Blobs – Unexpected blob count changes, container access failures, storage quota nearing limits
- Event Hubs – Consumer lag exceeds threshold, incoming message rate drops, partition errors
- Key Vault – Certificate/secret expiration warnings (30/60/90 days), access denied anomalies
- API Management – Backend API failures, response time SLA breaches, rate limit violations
- Container Apps – Replica failures, high CPU/memory usage, ingress traffic anomalies
- Data Factory – Pipeline run failures, trigger misfires, integration runtime offline
Tip
Actionable alerts, not noise: Configure Alarm Plugins to send alerts via email, Microsoft Teams, Slack, webhooks, or SMS—with full context about which subscription, resource group, and resource failed. Business users receive plain-English notifications, not Azure Resource Manager JSON.
Instant Remote Actions (No Azure Portal Required)
Fix problems immediately from the Nodinite Web Client—delegate safely to help desk and operations without granting Azure contributor roles:
- Web Jobs – Start, stop, view execution history, download logs
- Storage Queues – Purge messages, peek at queue contents, clear poison message queue
- Storage Blobs – List containers, view blob details, delete blobs (with confirmation)
- Azure Functions – Trigger on-demand execution, view invocation logs, restart Function App
- API Management – Test API endpoints, view backend health, check rate limit status
- Key Vault – View secret/certificate expiration dates, list access policies
- Container Apps – Restart replicas, scale replica count, view logs
- Data Factory – Trigger pipeline runs, cancel running pipelines, view activity details
Important
Role-based delegation without Azure portal access: Use Nodinite Roles and Monitor Views to let business users check Web Job status, help desk restart failed Functions, or operations purge queues—all without granting Azure Reader or Contributor roles. Every action is audited with user identity and timestamp.
Business Intelligence & Reporting
Learn from operational data with custom Power BI Reports powered by the Nodinite Web API:
- Function execution trends – Identify slow Functions, track error rates over time, optimize cold start performance
- Storage growth patterns – Predict capacity needs, detect unexpected blob/queue growth, optimize retention policies
- Web Job reliability – SLA compliance tracking, mean time between failures (MTBF), success rate trends
- Event Hub throughput – Peak load analysis, consumer lag trends, partition distribution insights
- API Management performance – Response time percentiles, top slowest APIs, error rate by endpoint
- Cost allocation – Map resource usage to business units, departments, or projects for chargeback/showback
Secure Self-Service with Full Audit Trails
Eliminate Azure portal access sprawl while empowering teams:
- Restrict access by subscription, resource group, or individual resource using Monitor Views
- Delegate safely: Help desk can restart Web Jobs, business users can check Function status, operations can purge queues—without Azure admin rights
- Full audit trail: Every remote action, configuration change, and resource access is logged with user identity, timestamp, and operation details (see Log Audits)
- No shared credentials: Use Azure App Registration (Service Principal) authentication—no passwords shared between users
- Least privilege enforcement: Grant only the Azure RBAC roles required for monitoring (typically Reader + specific action permissions)
Automatic Growth & Scalability
Nodinite scales with your Azure footprint without manual reconfiguration:
- Auto-discover new subscriptions – Add Azure App Registrations to Nodinite and all resources appear automatically
- Auto-discover new resource groups – Deploy new environments (dev, test, prod) and monitoring activates instantly
- Auto-discover new resources – Deploy Functions, Web Jobs, Storage, Event Hubs—all monitored within minutes
- No agent multiplication – One agent instance monitors hundreds of subscriptions, thousands of resources
- Performance optimized – Parallel API calls, intelligent polling intervals, differential change detection
Get Started
Ready to deploy the Azure Monitoring Agent? Follow this quick-start workflow:
| Step | Guide | What You'll Do |
|---|---|---|
| 1 | Prerequisites | Create Azure App Registration (Service Principal), assign RBAC roles, configure authentication, verify firewall rules |
| 2 | Install | Download the agent, run the installer, configure the monitoring service connection |
| 3 | Configuration | Add Azure subscriptions, configure resource groups, select services to monitor (Functions, Web Jobs, Storage, Event Hubs, etc.) |
| 4 | Configure Alerts | Set up alarm notifications (email, webhook, Teams, Slack) for service failures, queue backlogs, certificate expiration |
| 5 | Add Dashboard Widgets | Visualize Azure service health on customizable dashboards for real-time monitoring |
| 6 | Delegate Access | Create Monitor Views and assign Roles to enable self-service for business users and help desk |
Tip
Azure App Registration setup is critical: Follow the detailed Azure Application Access guide to configure Service Principal authentication with least-privilege RBAC roles. This is the foundation for secure, audited monitoring.
Common Questions
Q: How many Azure subscriptions can one agent monitor?
A: Unlimited. A single agent instance can monitor hundreds of subscriptions, thousands of resource groups, and tens of thousands of resources—with one Nodinite license.
Q: Do I need to grant users Azure portal access?
A: No. Nodinite provides role-based self-service access to Azure resources without granting Azure Reader or Contributor roles. Users authenticate to Nodinite, not Azure.
Q: What Azure RBAC roles does the agent require?
A: Typically Reader role on subscriptions plus specific action permissions (e.g., restart Web Jobs, purge queues). See Prerequisites and Azure Application Access for least-privilege guidance.
Q: Can I monitor Azure Government or Azure China regions?
A: Yes. Configure the agent with the appropriate Azure cloud endpoints (AzureUSGovernment, AzureChinaCloud, etc.) during installation.
Q: How does the agent authenticate to Azure?
A: Via Azure App Registration (Service Principal) with Client ID and Client Secret/Certificate. No user passwords or shared credentials required. All API calls use Azure AD authentication.
Q: Can I monitor Azure resources in different Azure AD tenants?
A: Yes. Configure multiple App Registrations—one per tenant—and the agent will monitor resources across all tenants from one Nodinite instance.
Q: Does the agent work with Azure Private Link or Private Endpoints?
A: Yes. The agent can monitor services behind Private Endpoints as long as network connectivity exists between the agent server and the private endpoint IP addresses. See Prerequisites for networking requirements.
Q: How does Function monitoring work with Application Insights?
A: The agent executes custom Kusto queries against Application Insights to retrieve Function execution metrics, failures, and traces. You configure the queries to match your telemetry schema. See Function monitoring for details.
Q: What's the difference between this agent and Azure Logic Apps agent?
A: This agent monitors Azure infrastructure services (Functions, Storage, Event Hubs, API Management, etc.). The Azure Logic Apps agent is a dedicated agent for Logic App workflows with specialized logging and monitoring capabilities for connectors, actions, and triggers.
Additional Resources
- Release Notes – Latest features, improvements, and bug fixes
- Troubleshooting – Solutions to common installation and configuration issues
- Updating – How to update the agent to the latest version
- Azure Application Access – Complete guide to App Registration and RBAC setup
- Features Overview – Detailed documentation for all 15+ Azure service types
- Monitor Views – Configure dashboards and role-based access for operators
- Remote Actions – Learn how to automate remediation and delegate actions safely
- Reports – Build custom Power BI dashboards with the Web API
Next Step
Get started now: Prerequisites
Related Azure Monitoring Solutions
Beyond this agent, Nodinite offers specialized monitoring for other Azure and Microsoft cloud services:
- Azure Logic Apps – Dedicated agent for Logic App workflow monitoring and logging
- Azure Service Bus – Monitor Service Bus queues, topics, and subscriptions (part of Message Queueing agent)
- Azure SQL Databases – Query performance, blocking, DTU usage (part of Database agent)
- Dynamics 365 – CRM entity monitoring, plugin failures, workflow health
- Web Services – Monitor any HTTP/HTTPS endpoint including Azure-hosted APIs