- 10 minutes to read

Release Notes

Azure Monitoring Agent

Monitor your entire Azure cloud estate—without granting everyone Azure portal access. The Nodinite Azure Monitoring Agent lets IT teams and business stakeholders detect, troubleshoot, and resolve Azure service issues from one unified platform—with role-based security, instant alerts, and Remote Actions built in.

  • ✅ Monitor 16+ Azure service categories from one agent – Functions, Web Jobs, Storage (Blobs/Queues/Files), Event Hubs, API Management, Key Vault, Container Apps, Data Factory, and more
  • ✅ Delegate safely with role-based access – Let help desk restart Web Jobs, business users check queue depths, operations clear storage—without granting Azure contributor roles
  • ✅ Receive proactive alerts before users complain – Queue backlog thresholds, Function failures, API latency spikes, certificate expiration, Key Vault access anomalies
  • ✅ Fix problems instantly from your web browser – One-click Remote Actions: start and stop Web Jobs, Function Apps, and Container Apps, manage queue messages, test Functions and APIs—no Azure CLI or PowerShell required
  • ✅ One agent, unlimited subscriptions – Monitor hundreds of subscriptions, resource groups, and regions with a single agent installation—no per-subscription licensing
  • ✅ Auto-discover new resources – As you deploy new Functions, Web Jobs, or Storage accounts, Nodinite automatically detects and monitors them

Why Teams Choose This Agent

Managing Azure services at enterprise scale creates operational challenges that slow down teams and increase risk:

  • 🔐 Security Risk from Broad Access – Giving help desk or business users Azure portal access means handing out contributor/reader roles across subscriptions
  • Fragmented Monitoring – Azure Monitor, Application Insights, Storage Analytics, Event Hub metrics—each service has its own dashboard
  • Alert Fatigue – Azure sends emails or calls webhooks, but doesn't correlate issues, delegate remediation, or integrate with your existing operational workflows
  • 🔍 No Self-Service for Non-Technical Users – Business users need Web Job status, queue depths, or Function executions—but can't navigate the Azure portal safely
  • ⏱️ Slow Troubleshooting – Support teams wait for Azure admins to investigate, restart services, or clear queues
  • 💰 High Cost of Sprawl – Azure Monitor costs scale linearly with subscriptions, regions, and resources

The Nodinite Azure Monitoring Agent solves this with unified monitoring, role-based delegation through Monitor Views and Roles, and instant remote actions across all your Azure subscriptions—without requiring Azure portal access.

Note

Nodinite uses the Azure REST API, Application Insights, and Azure Monitor to collect health data and execute remote actions—with all operations audited and secured via Azure App Registration (Service Principal) authentication.

Grant the App Registration only the Azure RBAC roles and delegated permissions needed for the monitoring features you choose to enable. If you don't opt in to a service, leave the related permissions out and follow the Azure Application Access and least-privilege guidance; the required rights are listed in Prerequisites - Azure rights.

How It Works

The Monitoring Service asks the agent for the state of each Azure Resource. The agent reads Azure over HTTPS, evaluates each Resource against its thresholds, and reports OK, Warning, Error, or Unavailable. Monitor Views show the result and Alarm Plugins send the alerts.

flowchart LR MS["fa:fa-server Monitoring Service"] -->|"asks for state"| AG["fa:fa-monitor-waveform Azure Monitoring Agent"] AG -->|"HTTPS 443"| AZ["fa:fa-cloud Azure Resource Manager
and service APIs"] AG --> OK["fa:fa-circle-check OK
within thresholds"] AG --> WA["fa:fa-triangle-exclamation Warning
Warning threshold breached"] AG --> ER["fa:fa-circle-xmark Error
failed or Error threshold breached"] AG --> UN["fa:fa-ban Unavailable
resource not reachable"] OK --> MV["fa:fa-display Monitor Views
and Alarm Plugins"] WA --> MV ER --> MV UN --> MV style MS fill:#2678BD style AG fill:#2678BD style AZ fill:#2678BD style OK fill:#93d16d style WA fill:#FFD525 style ER fill:#c33d34 style UN fill:#c33d34 style MV fill:#2678BD

How the agent evaluates Azure Resources: blue nodes are components, green is OK, yellow is Warning, and red is Error or Unavailable. The ports for every hop are in Prerequisites - Firewall.

What You Can Monitor

The Azure Monitoring Agent covers Azure cloud services organized by Subscription and Resource Group; each service appears as a Category of Resources in your Monitor Views:

graph LR subgraph "Nodinite" roMonitor[fal:fa-monitor-waveform Azure Monitoring Agent] end subgraph "Azure Cloud" roMonitor --- roSub(fal:fa-credit-card Subscription) roSub --> roRG[fal:fa-object-group Resource Group] roRG --- roapimgmtServices(fal:fa-clouds API Management Services) roapimgmtServices --- roAPIMNW(fal:fa-chart-network Private Endpoints) roapimgmtServices --- roAPICert(fal:fa-file-certificate Certificates) roapimgmtServices --- roAPI(fal:fa-cloud-upload APIs ) roapimgmtServices --- roAPILogger(fal:fa-arrow-to-bottom Event Hub Loggers) roAPILogger -.- roEH roRG --- roAppReg(fal:fa-user-lock App Registration) roAppReg --- roAppRegSecrets(fal:fa-user-secret Secrets) roAppReg --- roAppSSO(fal:fa-arrows-turn-to-dots Federated credentials) roAppReg --- roAppScopes(fal:fa-rectangle-history Scopes) roAppReg --- roAppCerts(fal:fa-file-certificate Certificates) roRG --- roAI(fal:fa-lightbulb-on Application Insights) roRG --- roWS(fal:fa-globe App Services) roWS --- roWSWA(Web App) roWS --- roWSFx(Function App) roWSFx --- roFX roRG --- roFX(fal:fa-function Functions) roRG --- roCert(fal:fa-file-certificate Certificates) roRG --- roCAE(fal:fa-leaf Container Apps - Environment) roCAE --- roCA(fal:fa-container-storage Container Apps) roRG --- roCDBA(fal:fa-database Cosmos DB Account) roCDBA --- roCDB(fal:fa-database Cosmos DB) roCDB --- roCDBC(fal:fa-boxes-stacked Containers) roRG --- roDF(fal:fa-industry-windows Data Factory) roDF --- roPL(fal:fa-bars Pipelines) roRG --- roEG(fal:fa-border-left Event Grid Topics) roEG --- roEGS(fal:fa-border-right Event Grid Subscriptions) roRG --- roEHNS(fal:fa-box-alt Event Hub Namespace) roEHNS --- roEH(fal:fa-border-outer Event Hubs) roRG --- roKV(fal:fa-vault Key Vault) roKV --- roKVKeys(fal:fa-key Keys) roKV --- roKVSecrets(fal:fa-user-secret Secrets) roRG --- ro1(fal:fa-user-circle Storage Accounts) ro1 --- ro5(fal:fa-boxes Blobs) ro1 --- ro2(fal:fa-file Files) ro1 --- ro4(fal:fa-list Queues) roRG --- roWJ(fal:fa-business-time Web Jobs) roWJ --- roWJC(fal:fa-repeat-alt Continuous) roWJ --- roWJT(fal:fa-bolt Triggered) end

The agent connects to Azure subscriptions and automatically discovers resources organized by resource groups—supporting unlimited subscriptions with a single agent installation.

Azure Service Coverage

Each service links to its Monitoring page (state evaluation and thresholds) and its Managing page (Remote Actions); the Azure Monitoring Features Overview lists every action.

Service What You Can Monitor Key Capabilities
Subscription (Managing) Subscription health, quota usage, service limits Auto-discover resources, track consumption
Resource Group (Managing) Resource group health, deployment status, cost allocation Organize monitoring by business unit or environment
API Management: Service, APIs, Certificates, Event Hub Loggers, Private Endpoints API availability, latency, request count, error rates, backend health Gateway and API endpoint monitoring
App Registration (Managing) Client secret expiration, certificate validity, federated credentials, scopes Identity and access management monitoring
App Services / Web Apps (Managing) Availability, response time, HTTP status codes, worker processes Monitor production web applications
Application Insights (Managing) Custom telemetry, traces, exceptions, dependencies Deep application performance monitoring
Azure Functions (Managing) Execution count, failures, duration, memory usage Kusto query-based monitoring via Application Insights
Certificates (Managing) Expiration dates, validity periods, issuer, subject Prevent service disruptions from expired certs
Container Apps (Managing) Container health, replica count, CPU/memory usage, ingress traffic Cloud-native container monitoring
Cosmos DB (Managing) Databases, containers, partition keys, throughput, keys Auto-discover SQL API databases and containers, monitor reachability, and support document browsing and approved queries
Data Factory (Managing) Pipeline runs, activity failures, trigger status, integration runtime health Data integration and ETL monitoring
Event Grid Topics (Managing) Topic health, event delivery success/failure rates, subscriptions Event-driven architecture monitoring
Event Hubs (Managing) Incoming/outgoing messages, consumer lag, throughput, partition health Real-time event streaming health
Key Vault (Managing) Secret expiration, certificate validity, key rotation, access audits Security and compliance tracking
Storage - Blobs (Managing) Container health, blob count, storage size, access patterns Track data lake and backup storage
Storage - Files File share capacity, file count, access metrics Monitor file-based integrations
Storage - Queues Queue depth, message age, dequeue rate, poison messages Prevent queue backlog and integration failures
Web Jobs (Managing) Job status (running, stopped, failed), execution history, logs Continuous and triggered job monitoring
Share and Delegate Save Time Save Money
Self-service for business users without Azure portal roles Help desk and operations resolve problems quickly, lowering MTTR One Nodinite license covers unlimited Azure subscriptions

Complementary Azure Monitoring Agents

For specialized Azure services, Nodinite offers dedicated agents:

What You Can Do

Unified Cloud Monitoring Across All Subscriptions

Monitor unlimited Azure subscriptions with one agent—no per-subscription licensing, no repeated deployments. The agent supports multiple subscriptions with different Azure App Registrations (Service Principals), different regions, and different access credentials—all managed from one Nodinite instance through Remote Configuration.

Auto-discovery of new resources: Nodinite detects new resources within the configured Subscriptions and Resource Groups, and they join your Monitor Views by Category and Application—no manual configuration required.

Multi-region support: Monitor Azure resources across all Azure regions (global, government, China) from a single agent installation.

Proactive Alerts & Intelligent Monitoring

Receive instant alerts when Azure services breach thresholds (Expected State) or fail—before your users notice:

  • Azure Functions – Execution failures, timeout errors, memory pressure, cold start delays (via Application Insights Kusto queries)
  • Web Jobs – Job failures, missed schedules, continuous jobs stopped unexpectedly
  • Storage Queues – Queue depth exceeds threshold, poison message detection, dequeue rate drops
  • Storage Blobs – Unexpected blob count changes, container access failures, storage quota nearing limits
  • Event Hubs – Consumer lag exceeds threshold, incoming message rate drops, partition errors
  • Key Vault – Certificate/secret expiration warnings (30/60/90 days), access denied anomalies
  • API Management – Backend API failures, response time SLA breaches, rate limit violations
  • Container Apps – Replica failures, high CPU/memory usage, ingress traffic anomalies
  • Data Factory – Pipeline run failures, trigger misfires, integration runtime offline

Tip

Configure Alarm Plugins to send alerts by e-mail, or through the HTTP Webhook plugin to Microsoft Teams, Slack, or your incident tool—with full context about which subscription, resource group, and resource failed.

Instant Remote Actions (No Azure Portal Required)

Fix problems immediately from the Nodinite Web Client—delegate safely to help desk and operations without granting Azure contributor roles:

  • Web Jobs – Start and stop continuous jobs, run triggered jobs, view history, download output
  • Storage Queues – List, download, remove, and post messages; edit thresholds
  • Storage Blobs and Files – List and download blobs and files; edit thresholds
  • Azure Functions – Enable, disable, and test Functions, view history, manage keys, list and clear failed executions, start and stop the Function App
  • API Management – View details, edit, and test APIs; create Event Hub Loggers
  • Key Vault – View details and edit thresholds
  • Container Apps – Start and stop Container Apps, view details
  • Data Factory – View Data Factory and pipeline details, edit pipeline thresholds

Important

Use Nodinite Roles, Users, and Monitor Views to let business users check Web Job status, help desk restart failed Functions, or operations manage queues—all without granting Azure Reader or Contributor roles. Every action is audited with user identity and timestamp; Auto Healing can run selected actions for you.

Business Intelligence & Reporting

Learn from operational data with Reports built directly on the Nodinite Web API: Function execution trends, Storage growth, Web Job reliability (MTBF, success rates), Event Hub throughput, API Management response times, and cost allocation per business unit for chargeback/showback.

Secure Self-Service with Full Audit Trails

Eliminate Azure portal access sprawl while empowering teams:

  • Restrict access by subscription, resource group, or individual resource using Monitor Views
  • Full audit trail: Every remote action, configuration change, and resource access is logged with user identity and timestamp (see Log Audits)
  • No shared credentials, least privilege: The agent uses one App Registration with only the roles your features need

Get Started

Follow this quick-start workflow:

Step Guide What You'll Do
1 Prerequisites Create Azure App Registration (Service Principal), assign RBAC roles, configure authentication, verify firewall rules
2 Install Install the agent and connect it to the Monitoring Service (Install Nodinite v7)
3 Configuration Add Azure subscriptions, configure resource groups, select services to monitor (Functions, Web Jobs, Storage, Event Hubs, etc.)
4 Configure Alerts Set up Alarm Plugins (e-mail or HTTP Webhook) for service failures, queue backlogs, certificate expiration
5 Add Dashboard Widgets Visualize Azure service health on customizable dashboards for real-time monitoring
6 Delegate Access Create Monitor Views and assign Roles to enable self-service for business users and help desk

Common Questions

Question Short answer
How many Azure subscriptions can one agent monitor? Unlimited, with one Nodinite license
Do users need Azure portal access? No. Users sign in to Nodinite, not Azure
Which Azure RBAC roles does the agent need? Typically Reader plus specific action permissions; see Prerequisites - Azure rights
How does the agent authenticate to Azure? Through an App Registration (Service Principal) in Microsoft Entra ID
Azure Government, Azure China, several tenants, Private Endpoints? Yes; see Troubleshooting and Prerequisites - Firewall
How does Function monitoring work? Kusto queries against Application Insights
How does it differ from the Azure Logic Apps agent? This agent monitors Azure infrastructure services; the Logic Apps agent logs and monitors Logic App workflows

The full answers are in the Troubleshooting FAQ.

Next Steps

  • Prerequisites – Prepare Azure App Registration, RBAC, and connectivity for secure onboarding
  • Install – Install the agent
  • Configuration – Add subscriptions and select services to monitor
  • Features Overview – Detailed documentation for all 16+ Azure service categories