title: Azure Log Analytics collector health
agents: special
catalog: cloud/azure
license: GPLv2
distribution: third_party
description:
 Reports the health of the Azure Log Analytics Queries special agent on the
 Checkmk collector host. The agent authenticates with Microsoft Entra and
 queries each configured workspace/profile through the Azure Monitor Logs
 Query API. The summary displays successful and failed query counts, an
 abbreviated first affected workspace ID, and the Azure error. Details groups
 successful profiles by workspace and lists failed profiles separately, with
 the full workspace ID and cached age where applicable.
 Data source: Azure Monitor Logs Query API and the Entra token endpoint.
 State mapping: CRIT if any token or KQL query fails, including partial,
 malformed, empty custom, or throttled results. OK if every query succeeds.
 The service reports the first failure and the oldest available cached age.
 Query services may display last successful rows for up to 24 hours when
 collection fails; those rows are stale, so always inspect this service.
 Metrics: azure_la_queries_failed and azure_la_queries_total are counts.
 Required access: an Entra application with read access to each workspace.
 No PowerShell modules, Azure CLI, or extra Python packages are needed.
 Documentation: README.md in the public source repository.
item:
 None; exactly one collector service is created for a configured host.
inventory:
 A service is discovered when the special agent emits a collector record in
 the azure_loganalytics agent section.
