| title | description | author | ms.author | ms.topic | ms.custom | ms.service | ms.date |
|---|---|---|---|---|---|---|---|
Monitoring Azure Container Registry data reference |
Important reference material needed when you monitor your Azure container registry. Provides details about metrics, resource logs, and log schemas. |
dlepow |
danlep |
reference |
subject-monitoring |
container-registry |
03/19/2021 |
See Monitor Azure Container Registry for details on collecting and analyzing monitoring data for Azure Container Registry.
Resource Provider and Type: Microsoft.ContainerRegistry/registries
| Metric | Exportable via Diagnostic Settings? | Unit | Aggregation Type | Description | Dimensions |
|---|---|---|---|---|---|
| AgentPoolCPUTime | Yes | Seconds | Total | CPU time used by ACR tasks running on dedicated agent pools | None |
| RunDuration | Yes | Milliseconds | Total | Duration of ACR tasks runs | None |
| StorageUsed | No | Bytes | Average | Storage used by the container registry Sum of storage for unique and shared layers, manifest files, and replica copies in all repositories1 |
Geolocation |
| SuccessfulPullCount | Yes | Count | Total | Successful pulls of container images and other artifacts from the registry | None |
| SuccessfulPushCount | Yes | Count | Total | Successful pushes of container images and other artifacts to the registry | None |
| TotalPullCount | Yes | Count | Total | Total pulls of container images and other artifacts from the registry | None |
| TotalPushCount | Yes | Count | Total | Total pushes of container images and other artifacts to the registry | None |
1Because of layer sharing, registry storage used may be less than the sum of storage for individual repositories. When you delete a repository or tag, you recover only the storage used by manifest files and the unique layers referenced.
For more information, see a list of all platform metrics supported in Azure Monitor.
For more information on what metric dimensions are, see Multi-dimensional metrics.
Azure Container Registry has the following dimensions associated with its metrics.
| Dimension Name | Description |
|---|---|
| Geolocation | The Azure region for a registry or geo-replica. |
This section lists the types of resource logs you can collect for Azure Container Registry.
For reference, see a list of all resource logs category types supported in Azure Monitor.
Resource Provider and Type: Microsoft.ContainerRegistry/registries
| Category | Display Name | Details |
|---|---|---|
| ContainerRegistryLoginEvents | Login Events | Registry authentication events and status, including the incoming identity and IP address |
| ContainerRegistryRepositoryEvents | Repository Events | Operations on images and other artifacts in registry repositories The following operations are logged: push, pull, untag, delete (including repository delete), purge tag, and purge manifest1 |
1Purge events are logged only if a registry retention policy is configured.
This section refers to all of the Azure Monitor Logs Kusto tables relevant to Azure Container Registry and available for query by Log Analytics.
| Table | Description |
|---|---|
| AzureActivity | Entries from the Azure Activity log that provide insight into any subscription-level or management group level events that have occurred in Azure. |
| AzureMetrics | Metric data emitted by Azure services that measure their health and performance. |
| ContainerRegistryLoginEvents | Azure Container Registry Login Auditing Logs |
| ContainerRegistryRepositoryEvents | Azure Container Registry Repository Auditing Logs |
For a reference of all Azure Monitor Logs / Log Analytics tables, see the Azure Monitor Log Table Reference.
The following table lists operations related to Azure Container Registry that may be created in the Activity log. This list is not exhaustive.
| Operation | Description |
|---|---|
| Create or Update Container Registry | Create a container registry or update a registry property |
| Delete Container Registry | Delete a container registry |
| List Container Registry Login Credentials | Show credentials for registry's admin account |
| Import Image | Import an image or other artifact to a registry |
| Create Role Assignment | Assign an identity an RBAC role to access a resource |
The following schemas are in use by Azure Container Registry's resource logs.
| Schema | Description |
|---|---|
| ContainerRegistryLoginEvents | Schema for registry authentication events and status, including the incoming identity and IP address |
| ContainerRegistryRepositoryEvents | Schema for operations on images and other artifacts in registry repositories |
- See Monitor Azure Container Registry for a description of monitoring an Azure container registry.
- See Monitoring Azure resources with Azure Monitor for details on monitoring Azure resources.