question

bczudek avatar image
0 Votes"
bczudek asked ·

Is it possible to raise multiple Azure Alerts from one Custom Log Search result?

Hi there,

I have a several Linux vms (very dynamic environment) which sends SysLog to single Log Analytic Workspace. I would like to raise an Azure Alert whenever a warning appears in SysLog Log Analytic Workspace. How can I write a Custom Log Search to accomplish it?

The query I wrote: Syslog | project _ResourceId, SyslogMessage, SeverityLevel, EventTime | where SeverityLevel == 'warn' can be consumed by Azure Monitor however if two machines produce Warning in the same alert period - only one Alert will be raised. What I would like to achieve is to have one query that is capable of producing multiple alerts.

Is it possible with logs?

many thanks Bartek

azure-virtual-machinesazure-virtual-machines-monitoring
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VaibhavChaudhari avatar image
1 Vote"
VaibhavChaudhari answered ·

To get the answer on Azure log analytics service, I'd suggest to post this question to below dedicated forum as well: https://social.msdn.microsoft.com/Forums/azure/en-US/newthread?category=windowsazureplatform&forum=opinsights

· Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VaibhavChaudhari avatar image
0 Votes"
VaibhavChaudhari answered ·
· Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.