22 of 246 VMs Reporting to Azure. The Rest Were Silent. No Logs. Nothing.
Twenty-two VMs reporting. Out of two hundred forty-six in production. The other two hundred twenty-four? Silent. No metrics. No logs. No heartbeat. A migration incident broke the Data Collection Rule associations. VM Insights just silently stopped reporting. Not a single error or alert fired. The monitoring system itself was unmonitored. The recovery: Azure Policy remediation at scale, immutable rules, and the question every team should answer - who monitors your monitoring? DEV was even worse - 30 of 115 VMs still reporting, the rest gone dark. The root cause was a routine migration that severed DCR associations across the board without triggering a single alert anywhere. The remediation path: Azure Policy Remediation to reassociate every VM with the correct Data Collection Rule at scale, not manually one by one. 246/246 PROD VMs back to full reporting. 115/115 DEV VMs recovered. The real architectural fix was the immutable rule that came after: if a VM exists, it reports. No exceptions. Azure Policy now enforces DCR association on every VM automatically - new VMs get monitoring at creation time, and a compliance dashboard shows any gaps in real time. The scariest gap is the…