{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/",
        "slug": "dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view",
        "url": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/"
        },
        "title": "Read an Azure metric average with its missing measurements in view",
        "summary": "How does a NULL measurement change an Azure Monitor metric average compared with a recorded zero?",
        "format": {
            "slug": "explainer",
            "name": "Explainer"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "cyber-defense",
            "label": "Cyber defense",
            "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-10T00:29:56+00:00",
        "modified_at": "2026-09-10T00:52:38+00:00",
        "reviewed_on": "2026-09-09",
        "reading_minutes": 2,
        "word_count": 250,
        "potentially_affected": "Azure Monitor platform and custom metrics, including standard Application Insights metrics.",
        "dse_recommendation": "Compare the valid measurement count and provider's missing-data behavior before interpreting a changed average.",
        "primary_source": {
            "name": "Azure Monitor metrics aggregation and display explained - Azure Monitor | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-aggregation-explained",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Azure Monitor does not count NULL values as valid metric measurements. An average containing missing measurements therefore uses fewer inputs; it does not silently substitute zero for them. Custom metrics use NULL when data is absent, while each platform resource provider chooses whether its metric records NULL or zero. Alerts consume the values written by that provider. <a href=\"https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-aggregation-explained\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<p>Count measures the number of observations rather than their magnitudes. For most metrics, Average is calculated from Sum divided by Count. Line charts can represent NULL intervals with dotted or dashed segments. <a href=\"https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-aggregation-explained\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<h2>Applicability</h2>\n<p>Use this interpretation for Azure Monitor platform and custom metrics, including standard Application Insights metrics. Identify the exact metric and provider before deciding what an empty interval means.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends reviewing the available measurement count alongside the average when a reporting source disappears. Keep the selected dimensions and interval consistent during the comparison. Ask whether the apparent improvement reflects the same population of observations or fewer participating measurements. Document the provider&#8217;s actual missing-data behavior before adopting an alert threshold based on the displayed average.</p>\n<h2>Verification</h2>\n<p>Compare a controlled interval with complete reporting against one with a known collection gap. Reconcile available Sum, Count and Average values where the metric supports those aggregations. Confirm how the chart renders the gap and how the chosen alert treats the written values. Preserve that example so a later dashed segment is not casually described as a measured zero.</p>\n<h2>Official references</h2>\n<p><a href=\"https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-aggregation-explained\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn: Metrics aggregation and display</a>.</p>",
        "content_text": "Source facts\nAzure Monitor does not count NULL values as valid metric measurements. An average containing missing measurements therefore uses fewer inputs; it does not silently substitute zero for them. Custom metrics use NULL when data is absent, while each platform resource provider chooses whether its metric records NULL or zero. Alerts consume the values written by that provider. Microsoft Learn.\nCount measures the number of observations rather than their magnitudes. For most metrics, Average is calculated from Sum divided by Count. Line charts can represent NULL intervals with dotted or dashed segments. Microsoft Learn.\nApplicability\nUse this interpretation for Azure Monitor platform and custom metrics, including standard Application Insights metrics. Identify the exact metric and provider before deciding what an empty interval means.\nDSE recommendation\nDSE recommends reviewing the available measurement count alongside the average when a reporting source disappears. Keep the selected dimensions and interval consistent during the comparison. Ask whether the apparent improvement reflects the same population of observations or fewer participating measurements. Document the provider’s actual missing-data behavior before adopting an alert threshold based on the displayed average.\nVerification\nCompare a controlled interval with complete reporting against one with a known collection gap. Reconcile available Sum, Count and Average values where the metric supports those aggregations. Confirm how the chart renders the gap and how the chosen alert treats the written values. Preserve that example so a later dashed segment is not casually described as a measured zero.\nOfficial references\nMicrosoft Learn: Metrics aggregation and display.",
        "content_markdown": "## Source facts\n\nAzure Monitor does not count NULL values as valid metric measurements. An average containing missing measurements therefore uses fewer inputs; it does not silently substitute zero for them. Custom metrics use NULL when data is absent, while each platform resource provider chooses whether its metric records NULL or zero. Alerts consume the values written by that provider. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-aggregation-explained).\n\nCount measures the number of observations rather than their magnitudes. For most metrics, Average is calculated from Sum divided by Count. Line charts can represent NULL intervals with dotted or dashed segments. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-aggregation-explained).\n\n## Applicability\n\nUse this interpretation for Azure Monitor platform and custom metrics, including standard Application Insights metrics. Identify the exact metric and provider before deciding what an empty interval means.\n\n## DSE recommendation\n\nDSE recommends reviewing the available measurement count alongside the average when a reporting source disappears. Keep the selected dimensions and interval consistent during the comparison. Ask whether the apparent improvement reflects the same population of observations or fewer participating measurements. Document the provider’s actual missing-data behavior before adopting an alert threshold based on the displayed average.\n\n## Verification\n\nCompare a controlled interval with complete reporting against one with a known collection gap. Reconcile available Sum, Count and Average values where the metric supports those aggregations. Confirm how the chart renders the gap and how the chosen alert treats the written values. Preserve that example so a later dashed segment is not casually described as a measured zero.\n\n## Official references\n\n[Microsoft Learn: Metrics aggregation and display](https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-aggregation-explained)."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/",
                "url": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-09"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Read an Azure metric average with its missing measurements in view",
                        "item": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/",
                "url": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/",
                "headline": "Read an Azure metric average with its missing measurements in view",
                "description": "How does a NULL measurement change an Azure Monitor metric average compared with a recorded zero?",
                "abstract": "How does a NULL measurement change an Azure Monitor metric average compared with a recorded zero?",
                "articleBody": "Source facts\nAzure Monitor does not count NULL values as valid metric measurements. An average containing missing measurements therefore uses fewer inputs; it does not silently substitute zero for them. Custom metrics use NULL when data is absent, while each platform resource provider chooses whether its metric records NULL or zero. Alerts consume the values written by that provider. Microsoft Learn.\nCount measures the number of observations rather than their magnitudes. For most metrics, Average is calculated from Sum divided by Count. Line charts can represent NULL intervals with dotted or dashed segments. Microsoft Learn.\nApplicability\nUse this interpretation for Azure Monitor platform and custom metrics, including standard Application Insights metrics. Identify the exact metric and provider before deciding what an empty interval means.\nDSE recommendation\nDSE recommends reviewing the available measurement count alongside the average when a reporting source disappears. Keep the selected dimensions and interval consistent during the comparison. Ask whether the apparent improvement reflects the same population of observations or fewer participating measurements. Document the provider’s actual missing-data behavior before adopting an alert threshold based on the displayed average.\nVerification\nCompare a controlled interval with complete reporting against one with a known collection gap. Reconcile available Sum, Count and Average values where the metric supports those aggregations. Confirm how the chart renders the gap and how the chosen alert treats the written values. Preserve that example so a later dashed segment is not casually described as a measured zero.\nOfficial references\nMicrosoft Learn: Metrics aggregation and display.",
                "datePublished": "2026-09-10T00:29:56+00:00",
                "dateModified": "2026-09-10T00:52:38+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260909-120-read-an-azure-metric-average-with-its-missing-measurements-in-view/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Read an Azure metric average with its missing measurements in view"
                },
                "articleSection": [
                    "Cybersecurity",
                    "IT"
                ],
                "keywords": [
                    "Cybersecurity",
                    "IT",
                    "Explainer",
                    "Information priority"
                ],
                "genre": "Explainer",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 250,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Azure Monitor metrics aggregation and display explained - Azure Monitor | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/metrics-aggregation-explained"
                }
            }
        ]
    }
}