You have an Azure subscription that contains a virtual machine named VM1. VM1 runs SUSE Linux Enterprise Server (SLES) and hosts an SAP workload. You…

Azure Monitor for SAP solutions utilizes various providers to collect data. For monitoring the Linux operating system, it uses the OS provider, which relies on the Prometheus Node Exporter. The Node Exporter is an agent installed on the target virtual machine (VM1) that exposes a wide variety of hardware and OS metrics in a format that Prometheus can scrape. By default, the Prometheus Node Exporter listens on TCP port 9100. To allow the Azure Monitor for SAP solutions collector to retrieve these metrics, the firewall on VM1 must be configured to allow inbound traffic on this specific port.

A. 22: This port is used for Secure Shell (SSH) to provide secure administrative access to the Linux VM, not for exposing monitoring metrics via Prometheus.

B. 80: This is the standard port for unencrypted HTTP web traffic. While the Prometheus endpoint is served over HTTP, it does not use this common web server port by default.

C. 443: This is the standard port for encrypted HTTPS web traffic. The Prometheus Node Exporter does not use TLS/SSL encryption by default.

1. Microsoft Learn: Configure OS provider for Azure Monitor for SAP solutions. Under the "Prerequisites" section

it states

"Install Prometheus Node Exporter on each SAP host that you want to monitor... The default port for the node exporter to listen is 9100." This document explicitly details the requirement to open port 9100 for the Prometheus endpoint.

2. Microsoft Learn: Architecture of Azure Monitor for SAP solutions. The architecture diagrams and descriptions show that providers

such as the OS provider

run on the SAP systems and expose endpoints that the collector component queries. The OS provider's endpoint is the Prometheus Node Exporter.