{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/", "slug": "dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry", "url": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/" }, "title": "Identify the intended Application Insights resource in preview AMA telemetry", "summary": "When does AMA-based OTLP ingestion require the microsoft.applicationId resource attribute?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "managed-it", "label": "Managed IT operations", "alt": "A controlled technology lifecycle progressing from assessment to approved production.", "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:22:25+00:00", "modified_at": "2026-09-10T02:14:31+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 241, "potentially_affected": "Nonproduction evaluations of preview AMA-based OTLP ingestion using a DCR that references Application Insights.", "dse_recommendation": "Map the application attribute to the intended Application Insights resource before evaluating whether the test data is correctly separated.", "primary_source": { "name": "Ingest OTLP Data into Azure Monitor with AMA (Preview) - Azure Monitor | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-ingest-agent", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

AMA-based OTLP ingestion is preview and Microsoft does not recommend it for production workloads. Its application configuration requires microsoft.applicationId when Application Insights created the DCR or when a manually created DCR includes an Application Insights ID. The attribute uses the GUID after InstrumentationKey= in the connection string, enabling separation by Application Insights resource. The source specifies AMA 1.38.1 or later on Windows and 1.37.0 or later on Linux. Microsoft Learn.

\n

Applicability

\n

Use this attribution check in a bounded preview evaluation with an Application Insights-linked DCR. Do not extend the attribute requirement to every manually orchestrated ingestion arrangement without checking whether that linkage exists.

\n

DSE recommendation

\n

Map the application attribute to the intended Application Insights resource before evaluating whether the test data is correctly separated. Have the application owner compare the actual runtime attribute with the chosen resource, rather than copying an identifier from another environment. Record the DCR linkage and installed agent version with the test configuration. Keep this identity mapping separate from network reachability.

\n

Verification

\n

Send an approved recognizable test event and inspect the configured attribute and expected Application Insights destination. Where two applications share infrastructure, test each intended attribution separately and check for misplaced records. Preserve the event identity, configuration and observed destination without copying unnecessary connection details into broadly shared evidence. Accept the mapping only after the intended resource can be distinguished from another test environment.

\n

Official references

\n

Microsoft Learn: AMA OTLP ingestion, preview. Source reviewed September 9, 2026.

", "content_text": "Source facts\nAMA-based OTLP ingestion is preview and Microsoft does not recommend it for production workloads. Its application configuration requires microsoft.applicationId when Application Insights created the DCR or when a manually created DCR includes an Application Insights ID. The attribute uses the GUID after InstrumentationKey= in the connection string, enabling separation by Application Insights resource. The source specifies AMA 1.38.1 or later on Windows and 1.37.0 or later on Linux. Microsoft Learn.\nApplicability\nUse this attribution check in a bounded preview evaluation with an Application Insights-linked DCR. Do not extend the attribute requirement to every manually orchestrated ingestion arrangement without checking whether that linkage exists.\nDSE recommendation\nMap the application attribute to the intended Application Insights resource before evaluating whether the test data is correctly separated. Have the application owner compare the actual runtime attribute with the chosen resource, rather than copying an identifier from another environment. Record the DCR linkage and installed agent version with the test configuration. Keep this identity mapping separate from network reachability.\nVerification\nSend an approved recognizable test event and inspect the configured attribute and expected Application Insights destination. Where two applications share infrastructure, test each intended attribution separately and check for misplaced records. Preserve the event identity, configuration and observed destination without copying unnecessary connection details into broadly shared evidence. Accept the mapping only after the intended resource can be distinguished from another test environment.\nOfficial references\nMicrosoft Learn: AMA OTLP ingestion, preview. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nAMA-based OTLP ingestion is preview and Microsoft does not recommend it for production workloads. Its application configuration requires microsoft.applicationId when Application Insights created the DCR or when a manually created DCR includes an Application Insights ID. The attribute uses the GUID after InstrumentationKey= in the connection string, enabling separation by Application Insights resource. The source specifies AMA 1.38.1 or later on Windows and 1.37.0 or later on Linux. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-ingest-agent).\n\n## Applicability\n\nUse this attribution check in a bounded preview evaluation with an Application Insights-linked DCR. Do not extend the attribute requirement to every manually orchestrated ingestion arrangement without checking whether that linkage exists.\n\n## DSE recommendation\n\nMap the application attribute to the intended Application Insights resource before evaluating whether the test data is correctly separated. Have the application owner compare the actual runtime attribute with the chosen resource, rather than copying an identifier from another environment. Record the DCR linkage and installed agent version with the test configuration. Keep this identity mapping separate from network reachability.\n\n## Verification\n\nSend an approved recognizable test event and inspect the configured attribute and expected Application Insights destination. Where two applications share infrastructure, test each intended attribution separately and check for misplaced records. Preserve the event identity, configuration and observed destination without copying unnecessary connection details into broadly shared evidence. Accept the mapping only after the intended resource can be distinguished from another test environment.\n\n## Official references\n\n[Microsoft Learn: AMA OTLP ingestion, preview](https://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-ingest-agent). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/", "url": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Identify the intended Application Insights resource in preview AMA telemetry", "item": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/", "url": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/", "headline": "Identify the intended Application Insights resource in preview AMA telemetry", "description": "When does AMA-based OTLP ingestion require the microsoft.applicationId resource attribute?", "abstract": "When does AMA-based OTLP ingestion require the microsoft.applicationId resource attribute?", "articleBody": "Source facts\nAMA-based OTLP ingestion is preview and Microsoft does not recommend it for production workloads. Its application configuration requires microsoft.applicationId when Application Insights created the DCR or when a manually created DCR includes an Application Insights ID. The attribute uses the GUID after InstrumentationKey= in the connection string, enabling separation by Application Insights resource. The source specifies AMA 1.38.1 or later on Windows and 1.37.0 or later on Linux. Microsoft Learn.\nApplicability\nUse this attribution check in a bounded preview evaluation with an Application Insights-linked DCR. Do not extend the attribute requirement to every manually orchestrated ingestion arrangement without checking whether that linkage exists.\nDSE recommendation\nMap the application attribute to the intended Application Insights resource before evaluating whether the test data is correctly separated. Have the application owner compare the actual runtime attribute with the chosen resource, rather than copying an identifier from another environment. Record the DCR linkage and installed agent version with the test configuration. Keep this identity mapping separate from network reachability.\nVerification\nSend an approved recognizable test event and inspect the configured attribute and expected Application Insights destination. Where two applications share infrastructure, test each intended attribution separately and check for misplaced records. Preserve the event identity, configuration and observed destination without copying unnecessary connection details into broadly shared evidence. Accept the mapping only after the intended resource can be distinguished from another test environment.\nOfficial references\nMicrosoft Learn: AMA OTLP ingestion, preview. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:22:25+00:00", "dateModified": "2026-09-10T02:14:31+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-571-identify-the-intended-application-insights-resource-in-preview-ama-telemetry/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Identify the intended Application Insights resource in preview AMA telemetry" }, "articleSection": [ "IT" ], "keywords": [ "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 241, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Ingest OTLP Data into Azure Monitor with AMA (Preview) - Azure Monitor | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/azure-monitor/containers/opentelemetry-ingest-agent" } } ] } }