Azure Monitor

Use the Azure Monitor integration to give a workbench read-only access to Azure Monitor platform metrics, Log Analytics logs, Azure portal dashboards, and alert rules in one Azure subscription. You can also point metrics at an Azure Monitor managed service for Prometheus workspace and query it with PromQL. After you configure the connection once, you can attach it to one or more workbenches and investigate Azure data with natural-language prompts.

This guide uses the Plural Console UI. For the complete list of integrations and general tool behavior, see Workbench tools.

Prerequisites

Before you begin, make sure you have:

• An Azure subscription whose resources send metrics to Azure Monitor or logs to a Log Analytics workspace.
• Permission in Microsoft Entra ID to register an application, and permission to assign Azure roles in the subscription.
• Optionally, an Azure Monitor workspace that stores Prometheus metrics, and its query endpoint.
• Permission in Plural Console to create a configured tool and edit the target workbench.
• An existing workbench, or permission to create one. See Setting up a workbench.

Create a service principal

Plural authenticates to Azure with a client secret for a Microsoft Entra application:

1. In Microsoft Entra ID, register an application for the integration.
2. Create a client secret for the application and copy its value immediately. Azure shows it only once.
3. Note the directory (tenant) ID, the application (client) ID, and the ID of the subscription you want to query.

Azure roles

Assign read-only roles to the service principal: