Microsoft Azure Log Analytics Queries for Checkmk

Community MKP for monitoring data in Azure Log Analytics workspaces with Checkmk 2.5.

A special agent runs read-only KQL queries through the Azure Monitor Logs Query API and turns results into Checkmk services.

What you get

• Built-in workspace operations and collector health checks
• Custom KQL profiles with configurable WARN and CRIT levels
• Shared profiles or profiles assigned to individual workspaces
• Multiple workspaces in one rule, with optional readable labels
• Alerts when an expected service is missing from a successful query

The package can monitor VM, application, and Azure service telemetry once that data is being sent to a workspace. KQL examples for App Service, Key Vault, Azure Activity, and messaging are included in the repository.

Requirements

• Checkmk 2.5
• Entra app registration with a client secret and read access to each workspace
• Workspace ID GUIDs and outbound HTTPS to Microsoft identity and Azure Monitor Logs endpoints
• Data already ingested through AMA/data collection rules or diagnostic settings

No additional Python packages, PowerShell modules, Azure CLI, or Azure SDK are required on the Checkmk site.

Installation

Install the MKP, then configure Azure Log Analytics Queries under Setup → Agents → Other integrations. Store the client secret in the Checkmk password store, add your workspaces and KQL profiles, and discover services.

Source and documentation: https://github.com/ghatak-x/checkmk-azure-loganalytics