{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/",
        "slug": "dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes",
        "url": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/"
        },
        "title": "Define request success before interpreting Application Insights outcomes",
        "summary": "When can an Application Insights request marked successful still represent an unsuccessful application outcome?",
        "format": {
            "slug": "explainer",
            "name": "Explainer"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "continuity-recovery",
            "label": "Continuity & recovery",
            "alt": "Paired infrastructure paths converging on a stable recovered service.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "business-continuity",
                "name": "Business Continuity",
                "url": "https://update.dsesecurity.com/topic/business-continuity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-10T00:29:14+00:00",
        "modified_at": "2026-09-10T00:55:35+00:00",
        "reviewed_on": "2026-09-09",
        "reading_minutes": 2,
        "word_count": 242,
        "potentially_affected": "Application Insights request telemetry for web applications.",
        "dse_recommendation": "Document application-specific request success semantics before relying on the default success classification.",
        "primary_source": {
            "name": "Application Insights telemetry data model - Azure Monitor | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/app/data-model-complete",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Application Insights request telemetry describes execution initiated by an incoming application request. Its required Success field treats requests as successful unless explicitly marked false. For web applications, the documented default classifies response codes below 400, and also 401, as successful. Microsoft cautions that this classification can differ from application semantics. <a href=\"https://learn.microsoft.com/en-us/azure/azure-monitor/app/data-model-complete\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<p>The source gives contrasting examples: a 404 can represent an expected empty result or a broken link; a redirect can fail a client that cannot follow it. A 206 response can indicate that only part of a submitted batch was processed successfully. <a href=\"https://learn.microsoft.com/en-us/azure/azure-monitor/app/data-model-complete\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<h2>Applicability</h2>\n<p>Use this review for Application Insights request telemetry for web applications. Keep the transport response, the recorded success value and the application&#8217;s intended outcome as separate evidence fields. This brief does not redefine HTTP status codes.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends asking each application owner to describe success for its important request paths. Record expected empty results, authentication challenges, unsupported redirects and partial processing where applicable. Decide which cases require an explicit failure classification in instrumentation. Avoid applying one blanket status-code exception to unrelated operations merely to improve a dashboard percentage.</p>\n<h2>Verification</h2>\n<p>Exercise approved examples of each documented outcome in a test environment. Compare the actual response, recorded Success value and business result. Have the owner explain any deliberate difference. Preserve representative telemetry and the classification decision so a later instrumentation change can be checked against the same cases.</p>\n<h2>Official references</h2>\n<p><a href=\"https://learn.microsoft.com/en-us/azure/azure-monitor/app/data-model-complete\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn: Application Insights telemetry data model</a>.</p>",
        "content_text": "Source facts\nApplication Insights request telemetry describes execution initiated by an incoming application request. Its required Success field treats requests as successful unless explicitly marked false. For web applications, the documented default classifies response codes below 400, and also 401, as successful. Microsoft cautions that this classification can differ from application semantics. Microsoft Learn.\nThe source gives contrasting examples: a 404 can represent an expected empty result or a broken link; a redirect can fail a client that cannot follow it. A 206 response can indicate that only part of a submitted batch was processed successfully. Microsoft Learn.\nApplicability\nUse this review for Application Insights request telemetry for web applications. Keep the transport response, the recorded success value and the application’s intended outcome as separate evidence fields. This brief does not redefine HTTP status codes.\nDSE recommendation\nDSE recommends asking each application owner to describe success for its important request paths. Record expected empty results, authentication challenges, unsupported redirects and partial processing where applicable. Decide which cases require an explicit failure classification in instrumentation. Avoid applying one blanket status-code exception to unrelated operations merely to improve a dashboard percentage.\nVerification\nExercise approved examples of each documented outcome in a test environment. Compare the actual response, recorded Success value and business result. Have the owner explain any deliberate difference. Preserve representative telemetry and the classification decision so a later instrumentation change can be checked against the same cases.\nOfficial references\nMicrosoft Learn: Application Insights telemetry data model.",
        "content_markdown": "## Source facts\n\nApplication Insights request telemetry describes execution initiated by an incoming application request. Its required Success field treats requests as successful unless explicitly marked false. For web applications, the documented default classifies response codes below 400, and also 401, as successful. Microsoft cautions that this classification can differ from application semantics. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/app/data-model-complete).\n\nThe source gives contrasting examples: a 404 can represent an expected empty result or a broken link; a redirect can fail a client that cannot follow it. A 206 response can indicate that only part of a submitted batch was processed successfully. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/app/data-model-complete).\n\n## Applicability\n\nUse this review for Application Insights request telemetry for web applications. Keep the transport response, the recorded success value and the application’s intended outcome as separate evidence fields. This brief does not redefine HTTP status codes.\n\n## DSE recommendation\n\nDSE recommends asking each application owner to describe success for its important request paths. Record expected empty results, authentication challenges, unsupported redirects and partial processing where applicable. Decide which cases require an explicit failure classification in instrumentation. Avoid applying one blanket status-code exception to unrelated operations merely to improve a dashboard percentage.\n\n## Verification\n\nExercise approved examples of each documented outcome in a test environment. Compare the actual response, recorded Success value and business result. Have the owner explain any deliberate difference. Preserve representative telemetry and the classification decision so a later instrumentation change can be checked against the same cases.\n\n## Official references\n\n[Microsoft Learn: Application Insights telemetry data model](https://learn.microsoft.com/en-us/azure/azure-monitor/app/data-model-complete)."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/",
                "url": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-09"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Define request success before interpreting Application Insights outcomes",
                        "item": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/",
                "url": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/",
                "headline": "Define request success before interpreting Application Insights outcomes",
                "description": "When can an Application Insights request marked successful still represent an unsuccessful application outcome?",
                "abstract": "When can an Application Insights request marked successful still represent an unsuccessful application outcome?",
                "articleBody": "Source facts\nApplication Insights request telemetry describes execution initiated by an incoming application request. Its required Success field treats requests as successful unless explicitly marked false. For web applications, the documented default classifies response codes below 400, and also 401, as successful. Microsoft cautions that this classification can differ from application semantics. Microsoft Learn.\nThe source gives contrasting examples: a 404 can represent an expected empty result or a broken link; a redirect can fail a client that cannot follow it. A 206 response can indicate that only part of a submitted batch was processed successfully. Microsoft Learn.\nApplicability\nUse this review for Application Insights request telemetry for web applications. Keep the transport response, the recorded success value and the application’s intended outcome as separate evidence fields. This brief does not redefine HTTP status codes.\nDSE recommendation\nDSE recommends asking each application owner to describe success for its important request paths. Record expected empty results, authentication challenges, unsupported redirects and partial processing where applicable. Decide which cases require an explicit failure classification in instrumentation. Avoid applying one blanket status-code exception to unrelated operations merely to improve a dashboard percentage.\nVerification\nExercise approved examples of each documented outcome in a test environment. Compare the actual response, recorded Success value and business result. Have the owner explain any deliberate difference. Preserve representative telemetry and the classification decision so a later instrumentation change can be checked against the same cases.\nOfficial references\nMicrosoft Learn: Application Insights telemetry data model.",
                "datePublished": "2026-09-10T00:29:14+00:00",
                "dateModified": "2026-09-10T00:55:35+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260909-162-define-request-success-before-interpreting-application-insights-outcomes/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Define request success before interpreting Application Insights outcomes"
                },
                "articleSection": [
                    "Business Continuity",
                    "IT"
                ],
                "keywords": [
                    "Business Continuity",
                    "IT",
                    "Explainer",
                    "Information priority"
                ],
                "genre": "Explainer",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Business Continuity",
                        "url": "https://update.dsesecurity.com/topic/business-continuity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 242,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Application Insights telemetry data model - Azure Monitor | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/app/data-model-complete"
                }
            }
        ]
    }
}