{"id":1043,"date":"2019-08-29T00:00:00","date_gmt":"2019-08-29T00:00:00","guid":{"rendered":""},"modified":"2025-06-25T12:16:23","modified_gmt":"2025-06-25T19:16:23","slug":"track-the-health-of-your-disaster-recovery-with-log-analytics","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/track-the-health-of-your-disaster-recovery-with-log-analytics\/","title":{"rendered":"Track the health of your disaster recovery with Log Analytics"},"content":{"rendered":"\n

Once you adopt Azure Site Recovery, monitoring of your setup<\/a> can become a very involved exercise. You\u2019ll need to ensure that the replication for all protected instances continue and that virtual machines are always ready for failover. While Azure Site Recovery solves this need by providing point-in-time health status, active health alerts, and the latest 72 hour trends, it still needs several man hours to keep track and analyze these signals. The problem is aggravated when the number of protected instances grow. It often needs a team of disaster recovery operators to do this for hundreds of virtual machines.<\/p>\n\n\n\n

We have heard through multiple feedback forums<\/a> that customers receive too many alerts. Even with these alerts, long-term corrective actions were difficult to identify as there is no single pane to look at historical data. Customers have reached out to us with a need to track various metrics such as recovery point objective (RPO) health over time, data change rate (churn) of machine disks over time, current state of the virtual machine, and test failover status as some of the basic requirements. It is also important for customers to be notified for alerts as per your enterprise\u2019s business continuity and disaster recovery compliance needs.<\/p>\n\n\n\n

The integrated solution with logs in Azure Monitor and Log Analytics<\/h3>\n\n\n\n

Azure Site Recovery brings to you an integrated solution for monitoring and advanced alerting powered by logs in Azure <\/a>Monitor<\/a>. You can now send the diagnostic logs from the Site Recovery vault to a workspace in Log Analytics<\/a>. The logs are, also known as Azure Monitor logs, visible in the Create diagnostic setting<\/strong> blade as of today.<\/p>\n\n\n\n

The logs are generated for Azure Virtual Machines, as well as any VMware or physical machines protected by Azure Site Recovery.<\/strong><\/p>\n\n\n\n

\"Diagnostic<\/figure>\n\n\n\n

Once the data starts feeding in the workspace, the logs can be queried using Kusto Query Language<\/a> to produce historical trends, point-in-time snapshots, as well as disaster recovery admin level and executive level dashboards for a consolidated view. The data can be fed into a workspace from multiple Site Recovery vaults. Below are a few example use cases that can be currently solved with this integration:<\/p>\n\n\n\n