{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/",
        "slug": "dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits",
        "url": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/"
        },
        "title": "Separate Azure Monitor workspace quota growth from ingestion-endpoint limits",
        "summary": "Why might a workspace quota increase be insufficient when Prometheus ingestion approaches its limits?",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "managed-it",
            "label": "Managed IT operations",
            "alt": "A controlled technology lifecycle progressing from assessment to approved production.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "business-continuity",
                "name": "Business Continuity",
                "url": "https://update.dsesecurity.com/topic/business-continuity/"
            },
            {
                "slug": "networks-infrastructure",
                "name": "Networks & Infrastructure",
                "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-10T00:26:40+00:00",
        "modified_at": "2026-09-10T01:40:03+00:00",
        "reviewed_on": "2026-09-09",
        "reading_minutes": 2,
        "word_count": 242,
        "potentially_affected": "Azure Monitor workspaces ingesting managed Prometheus metrics.",
        "dse_recommendation": "Identify whether the constrained resource is the workspace or its DCR/DCE ingestion path before requesting more capacity.",
        "primary_source": {
            "name": "Best practices for scaling Azure Monitor Workspaces with Azure Monitor managed service for Prometheus - Azure Monitor | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Azure Monitor workspace ingestion limits can be increased through a support request. Microsoft recommends monitoring time-series and events-per-minute utilization, and requesting an increase when ingestion approaches eighty percent of its limit. The DCR and DCE limits feeding Prometheus data are separate and cannot be increased; Microsoft instead describes distributing ingestion across additional rules and endpoints. <a href=\"https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<p>The same guidance recommends examining high-cardinality metrics and removing unnecessary labels to reduce the number of time series. This is a collection-design decision, not an assurance that every label can safely be discarded. <a href=\"https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<h2>Applicability</h2>\n<p>Use this capacity review for Azure Monitor workspaces ingesting managed Prometheus metrics. Inventory the workspace and its actual ingestion endpoints before choosing between quota growth and distribution of the collection load.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends a separate utilization record for each constrained resource. Include projected series growth and the labels driving it. Ask query and alert owners to approve any label removal before changing collection. Where endpoint distribution is necessary, document which producers move to each path instead of merely adding another endpoint and assuming traffic will rebalance.</p>\n<h2>Verification</h2>\n<p>After an approved pilot, compare utilization and observed ingestion across the original and new paths. Re-run representative queries and alerts against the resulting labels. Retain the before-and-after series counts, endpoint assignment and missing-data checks. Confirm the actual bottleneck improved before closing a workspace quota request or extending the distribution pattern.</p>\n<h2>Official references</h2>\n<p><a href=\"https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn: Scale Azure Monitor workspaces</a>.</p>",
        "content_text": "Source facts\nAzure Monitor workspace ingestion limits can be increased through a support request. Microsoft recommends monitoring time-series and events-per-minute utilization, and requesting an increase when ingestion approaches eighty percent of its limit. The DCR and DCE limits feeding Prometheus data are separate and cannot be increased; Microsoft instead describes distributing ingestion across additional rules and endpoints. Microsoft Learn.\nThe same guidance recommends examining high-cardinality metrics and removing unnecessary labels to reduce the number of time series. This is a collection-design decision, not an assurance that every label can safely be discarded. Microsoft Learn.\nApplicability\nUse this capacity review for Azure Monitor workspaces ingesting managed Prometheus metrics. Inventory the workspace and its actual ingestion endpoints before choosing between quota growth and distribution of the collection load.\nDSE recommendation\nDSE recommends a separate utilization record for each constrained resource. Include projected series growth and the labels driving it. Ask query and alert owners to approve any label removal before changing collection. Where endpoint distribution is necessary, document which producers move to each path instead of merely adding another endpoint and assuming traffic will rebalance.\nVerification\nAfter an approved pilot, compare utilization and observed ingestion across the original and new paths. Re-run representative queries and alerts against the resulting labels. Retain the before-and-after series counts, endpoint assignment and missing-data checks. Confirm the actual bottleneck improved before closing a workspace quota request or extending the distribution pattern.\nOfficial references\nMicrosoft Learn: Scale Azure Monitor workspaces.",
        "content_markdown": "## Source facts\n\nAzure Monitor workspace ingestion limits can be increased through a support request. Microsoft recommends monitoring time-series and events-per-minute utilization, and requesting an increase when ingestion approaches eighty percent of its limit. The DCR and DCE limits feeding Prometheus data are separate and cannot be increased; Microsoft instead describes distributing ingestion across additional rules and endpoints. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice).\n\nThe same guidance recommends examining high-cardinality metrics and removing unnecessary labels to reduce the number of time series. This is a collection-design decision, not an assurance that every label can safely be discarded. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice).\n\n## Applicability\n\nUse this capacity review for Azure Monitor workspaces ingesting managed Prometheus metrics. Inventory the workspace and its actual ingestion endpoints before choosing between quota growth and distribution of the collection load.\n\n## DSE recommendation\n\nDSE recommends a separate utilization record for each constrained resource. Include projected series growth and the labels driving it. Ask query and alert owners to approve any label removal before changing collection. Where endpoint distribution is necessary, document which producers move to each path instead of merely adding another endpoint and assuming traffic will rebalance.\n\n## Verification\n\nAfter an approved pilot, compare utilization and observed ingestion across the original and new paths. Re-run representative queries and alerts against the resulting labels. Retain the before-and-after series counts, endpoint assignment and missing-data checks. Confirm the actual bottleneck improved before closing a workspace quota request or extending the distribution pattern.\n\n## Official references\n\n[Microsoft Learn: Scale Azure Monitor workspaces](https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice)."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/",
                "url": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-09"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Separate Azure Monitor workspace quota growth from ingestion-endpoint limits",
                        "item": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/",
                "url": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/",
                "headline": "Separate Azure Monitor workspace quota growth from ingestion-endpoint limits",
                "description": "Why might a workspace quota increase be insufficient when Prometheus ingestion approaches its limits?",
                "abstract": "Why might a workspace quota increase be insufficient when Prometheus ingestion approaches its limits?",
                "articleBody": "Source facts\nAzure Monitor workspace ingestion limits can be increased through a support request. Microsoft recommends monitoring time-series and events-per-minute utilization, and requesting an increase when ingestion approaches eighty percent of its limit. The DCR and DCE limits feeding Prometheus data are separate and cannot be increased; Microsoft instead describes distributing ingestion across additional rules and endpoints. Microsoft Learn.\nThe same guidance recommends examining high-cardinality metrics and removing unnecessary labels to reduce the number of time series. This is a collection-design decision, not an assurance that every label can safely be discarded. Microsoft Learn.\nApplicability\nUse this capacity review for Azure Monitor workspaces ingesting managed Prometheus metrics. Inventory the workspace and its actual ingestion endpoints before choosing between quota growth and distribution of the collection load.\nDSE recommendation\nDSE recommends a separate utilization record for each constrained resource. Include projected series growth and the labels driving it. Ask query and alert owners to approve any label removal before changing collection. Where endpoint distribution is necessary, document which producers move to each path instead of merely adding another endpoint and assuming traffic will rebalance.\nVerification\nAfter an approved pilot, compare utilization and observed ingestion across the original and new paths. Re-run representative queries and alerts against the resulting labels. Retain the before-and-after series counts, endpoint assignment and missing-data checks. Confirm the actual bottleneck improved before closing a workspace quota request or extending the distribution pattern.\nOfficial references\nMicrosoft Learn: Scale Azure Monitor workspaces.",
                "datePublished": "2026-09-10T00:26:40+00:00",
                "dateModified": "2026-09-10T01:40:03+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260909-316-separate-azure-monitor-workspace-quota-growth-from-ingestion-endpoint-limits/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Separate Azure Monitor workspace quota growth from ingestion-endpoint limits"
                },
                "articleSection": [
                    "Business Continuity",
                    "Networks & Infrastructure"
                ],
                "keywords": [
                    "Business Continuity",
                    "Networks & Infrastructure",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Business Continuity",
                        "url": "https://update.dsesecurity.com/topic/business-continuity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "Networks & Infrastructure",
                        "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
                    }
                ],
                "wordCount": 242,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Best practices for scaling Azure Monitor Workspaces with Azure Monitor managed service for Prometheus - Azure Monitor | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/azure-monitor-workspace-scaling-best-practice"
                }
            }
        ]
    }
}