GuideInformationCybersecurityIT

Separate autoscale condition evaluations from completed scaling actions

Use both autoscale log categories to explain a capacity change.

Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.
DSE visual intelligenceCyber defenseGuide · 1 min read
Executive summary

What you need to know

Use both autoscale log categories to explain a capacity change.

Potentially affected

Use this review when investigating an expected capacity change. Identify the autoscale setting, rule, target resource and observation interval. Keep a rule evaluation, an initiated action and the resulting resource state as separate items in the investigation timeline.

DSE recommendation

DSE recommends designing the incident worksheet to capture both log categories and the corresponding capacity observation.

Source facts

Microsoft distinguishes Autoscale Evaluations logs from Autoscale Scale Actions logs. Evaluation entries describe observed metrics, evaluated rules and whether an action was triggered. Scale-action entries describe actions initiated by the service and their results, including success, failure and the amount of scaling observed. Microsoft Learn.

Applicability

Use this review when investigating an expected capacity change. Identify the autoscale setting, rule, target resource and observation interval. Keep a rule evaluation, an initiated action and the resulting resource state as separate items in the investigation timeline.

DSE recommendation

DSE recommends designing the incident worksheet to capture both log categories and the corresponding capacity observation. Start from the expected rule evaluation, then trace any resulting action to its outcome. Avoid closing the issue merely because an evaluation mentions a trigger. Agree with the service owner how resource readiness will be checked after a capacity change.

Verification

For an approved scaling exercise, correlate evaluation time, action result and observed capacity. Confirm that the intended instances become usable for the application through a separate service check. Record unsuccessful or absent action outcomes explicitly and follow the matching diagnostic branch. Preserve the relevant identifiers and timestamps so another operator can reconstruct the chain.

Official references

Microsoft Learn: Troubleshoot Azure Monitor autoscale.

Primary reference

Review the official source

Troubleshoot Azure Monitor autoscale - Azure Monitor | Microsoft Learn · Verified September 17, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE