What you need to know
Does guest-only subscription alerting in Monitoring Coverage include VMs without OTel collection?
Potentially affected
Preview Azure Monitor Monitoring Coverage VM recommended alerts, particularly subscription scope with host metric rules skipped.
DSE recommendation
Compare the intended subscription VM population with the actual OTel-enabled population before approving guest-only coverage.
Source facts
Monitoring Coverage is an Azure Monitor preview. Its subscription-wide VM alert option includes existing and future VMs, creates one rule per subscription, and requires a user-assigned managed identity plus Monitoring Contributor. Selected-resource scope instead creates one rule per selected VM. In subscription scope, choosing to skip host metric rules leaves guest alerts only for VMs with Azure Monitor Agent OTel collection; VMs without that telemetry remain uncovered. Microsoft Learn.
Applicability
This is a scope decision within the preview recommended-alert workflow, not a general assessment of every alert already deployed to a subscription. A subscription label alone should not be the acceptance criterion for the proposed guest-only configuration.
DSE recommendation
Compare the intended subscription VM population with the actual OTel-enabled population before approving guest-only coverage. List any exceptions and decide whether they should receive appropriate host alerts, have guest collection established, or remain an explicitly accepted gap. Assign ownership for checking newly created VMs against that decision. Keep notification configuration and the telemetry population as separate review items.
Verification
Inspect the proposed scope and the host-rule selection on Review + Enable. Compare representative VMs with and without the required collection and document which proposed rules can cover each. Reconcile the resulting population with the approved inventory rather than assuming subscription scope is exhaustive. Retain the selected settings and exceptions; this review should not claim that an alert fired or reached an operator unless that separate test was performed.
Official references
Microsoft Learn: Monitoring Coverage preview. Source reviewed September 9, 2026.
Review the official source
Monitoring coverage in Azure Monitor (preview) - Azure Monitor | Microsoft Learn · Verified September 9, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE