Using Application Insights, log search alert rules can be created by writing queries on telemetry sent through the app. The problem is that we have to write a different alert for every event name and their logic, which includes a threshold value and which requires maintenance effort. The threshold value and related conditions need to be set in the alert UX of the Application Insights portal, we are now looking to create a generic alert where the threshold value can be dynamic. Is there a method for doing this?

Hi, This is not possible. If you have different threshold you should create different alert rule. Even if you achieve something in the query where you have let's say some column that sets value 0 for unhealthy and value 1 for healthy you will still have to update the query every time you want to add new event which does not differ and it is more complex than creating alert rules. Please " Accept the answer " if the information helped you. This will help us and others in the community as well.

Trying to create a Generic alert using log search alert rule in application insight

Accepted answer

Stanislav Zhelyazkov 24,766 Reputation points MVP

2024-06-06T07:16:31.2+00:00

Hi,

This is not possible. If you have different threshold you should create different alert rule. Even if you achieve something in the query where you have let's say some column that sets value 0 for unhealthy and value 1 for healthy you will still have to update the query every time you want to add new event which does not differ and it is more complex than creating alert rules.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
Saransh Gaur 40 Reputation points Microsoft Employee

2024-06-06T13:30:45.7433333+00:00

Here, I can get all events that have the "Alert_" prefix in their names. In the event values, I get the threshold limit. If the final output is within the threshold limit, we will return 0; otherwise, we will return 1.
The problem is that multiple events can exceed the threshold value at the same time, and we want to trigger multiple alerts simultaneously. With the current design, we need to create one generic event which will trigger the multiple alerts for different events each time.
Therefore, we are looking for a generic alert that will return multiple event names for which we want to trigger alerts. Having these alerts differentiated will help us maintain and monitor them more effectively.

Stanislav Zhelyazkov 24,766 Reputation points MVP

2024-06-07T05:39:43.8666667+00:00

Please provide at least some sample data to understand what you mean exactly. Also from this sample data what should trigger the alert rule and how many triggers (alert instances) should come out of it? Your statements are too generic so it is hard to provide specific answer on generic information thus my response is also generic.

Abdul 2,615 Reputation points Microsoft Vendor

2024-07-10T03:27:50.8433333+00:00

Hi Saransh Gaur,

we wanted to follow up and see if the answer provided by @Stanislav Zhelyazkov was helpful in resolving your issue.

If it was, please consider clicking "Upvote and Accept Answer" on the post to let us know.

We're here to assist you, so feel free to reach out if you have any more questions.

Thank You.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Trying to create a Generic alert using log search alert rule in application insight

0 additional answers

Your answer