Azure Copilot observability agent (preview)

The Azure Copilot observability agent is an AI-powered system that helps you explore and analyze your observability data across different scenarios by using a chat interface and natural language queries. The agent helps you:

• Run a deep investigation — an investigation is a thorough process designed to identify the root cause of a specific incident.
• Chat with your data — the agent answers user questions to surface clear insights from a large volume of data:
  • Explore logs and metrics — find common errors, understand application usage volume, visualize trends over time, and more.
  • Analyze specific events or anomalies — find correlated changes and dependency failures, and understand the impact on users.

Run a deep investigation

A deep investigation is a focused analysis that the observability agent runs as part of the troubleshooting experience. You initiate it from an Azure Monitor alert - either from the Azure portal or directly from an email alert notification.

During an investigation, the agent analyzes and correlates observability signals - such as metrics, logs, alerts and alert context, tracing data, and resource health signals - to understand what changed, detect abnormal behavior, and assess the scope and impact of the issue.

The investigation produces analysis that explains what happened and surfaces relevant insights. Investigation results are temporary and available for a limited time. To preserve the investigation context and results, you can save them as an Azure Monitor issue. Saving an issue lets you return to the investigation later, resume the conversation, and continue exploring the problem with full context and reasoning.

For more information about Azure Monitor issues and capabilities, see Azure Monitor issues.

Chat with your data

The simplest way to use the observability agent is to chat with your observability data. This process happens in the scope of a specific resource, as shown in the following section. The chat is temporary, which means it's not saved for later access or use. The agent accesses the resource through which it was launched, and provides suggestions to help you explore and analyze the resource's telemetry.

To ask the observability agent anything about your data, open the Azure portal and select your Application Insights or Log Analytics Workspace resource.

1. In the resource menu, go to the Logs blade.

   

2. Select the Observability Agent button to open a chat window. From here, you can start interacting with the agent. You can ask questions about your data or start an investigation.

   

Work with the observability agent

The observability agent provides a conversational experience for exploring and understanding your observability data. You interact with the agent through chat to ask questions, explore signals, and gain insights in an iterative and flexible way.

As the agent generates insights, it explains its reasoning. It highlights which signals it considered and how they relate to one another. This transparency helps you understand not only what the agent surfaced, but why it identified the information as relevant.

The conversation continues as your understanding evolves. You can ask follow-up questions to dig deeper into the information already presented - for example, to clarify a specific behavior, focus on a particular resource or signal, or explore a related angle - while maintaining context across the conversation.

Investigation data retention

For operational, quality, and future product improvement purposes, the system might retain investigation data internally for up to 30 days after an investigation is completed.

Regions

The observability agent is currently available in the following Azure regions. Some parts of the processing are geographically based rather than regional.

Current limitations

Keep in mind these general current limitations:

• You can't continue the same conversation beyond 24 hours.
• The agent supports English only. Other languages have limited support.
• Customer-managed keys (CMK) aren't supported for observability agent conversation data at this time. The data is encrypted by using Microsoft-managed encryption keys in accordance with Azure data protection standards.

Responsible AI

Azure Copilot is designed and operated in alignment with Microsoft's Responsible AI principles. For more information, see Responsible AI FAQ for Azure Copilot.

Related content

• Azure Monitor issues overview - Detailed technical documentation.
• Use Azure Monitor issues - Step-by-step usage guide.
• Best practices for Azure Copilot observability agent - Optimization guidance.