Azure Monitor MCP AI agent

This AI agent investigates Azure Monitor alerts by querying Log Analytics workspaces with KQL, retrieving platform metrics, and checking activity logs and resource health through Azure MCP tools. It returns structured findings to the parent agent.

Workflow

1. Identify what to investigate.

   The agent uses a provided alert instance ID and the Azure subscription ID.

2. Gather context about the alert and the affected resource, and investigate metrics or logs.

3. Return findings, including the probable cause, trend direction, and recommended actions.

For more information about configuring this AI agent, see Configure observability agents for ServiceNow Otto.

<table><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Allow third party to access this AI agent

</td><td>

When enabled, third-party AI agents can use this agent. This value is off (false) by default. This setting is defined in the AI Agent configs [sn_aia_agent_config] table on the External discoverable field.

</td></tr><tr><td>

Allow AI specialists to access this AI agent

</td><td>

When enabled, AI specialists can use this agent. This value is off (false) by default. When set to true, more configuration options for tools become available so that an AI specialist can map inputs and response templates to tool outputs. This setting is defined in the AI Agent configs [sn_aia_agent_config] table on the Specialist enabled field.

</td></tr><tr><td>

Manage long-term memory

</td><td>

When enabled, all previous user interactions are used as context for the LLM. This value is off (false) by default. This setting is defined by the sn_aia.ltm.enable_long_term_memory system property. For more information, see ServiceNow Otto AI agents reference.

</td></tr><tr><td>

Tools

</td><td>

• Model Context Protocol tools

Get Entity Health

Get Resource Health

Get VM Details

List Activity Logs

List Health Events

List Metric Definitions

List Tables

List Workspaces

Query Alert Details

Query Metrics

Query Resource Logs

Query Workspace Logs

• Script

Lookup CMDB CI

</td></tr><tr><td>

Allowed user roles The specific user roles that can access this AI agent.

</td><td>

evt_mgmt_operator

</td></tr><tr><td>

Data access roles The specific user identity roles that determine which data the AI agent can access and what actions it can take.

</td><td>

evt_mgmt_operator

</td></tr><tr><td>

Triggers

</td><td>

Optional. None defined by default. An admin can specify triggers if desired. For more information, see Add a trigger to an AI agent.

</td></tr><tr><td>

Channels

</td><td>

Configure an assistant for Virtual Agent or ServiceNow Otto panel using Assistant Designer.

</td></tr><tr><td>

Used in agentic workflows

</td><td>

Analyze alert impact agentic workflow

</td></tr></tbody> </table>For more information, see ITOM AIOps.

Parent Topic:IT Operations Management AI agents