Azure Site Recovery alert

Question

I have deployed Azure Site Recovery. Then I want to create an alert to email. But alerts from Site Recovery events can't be filtered. Is it possible to filter alerts from Site Recovery events only Critical events? Thanks

Answer 1

Hello @Haza Hafiz Riski Thank you for reaching out to us through Microsoft Q&A platform. Happy to help!

Based on the information provided, I understand that you are looking for information to know if it is possible to filter only critical event alerts from Site Recovery events.

Azure Site Recovery (ASR) alerts are indeed limited in terms of filtering options directly within Azure Monitor. However, there are workarounds you can consider to achieve your goal of filtering alerts for critical events only:

1. Use Azure Monitor Log Analytics (formerly known as Log Analytics):
   • Azure Site Recovery logs events to Log Analytics, where you can query and filter based on specific criteria, including severity levels like "Critical".
   • You can create a Log Analytics query that filters events from ASR based on severity, and then create an alert rule based on the results of this query.
   • Here's a basic example of how you might filter ASR events in Log Analytics:

AzureDiagnostics

| where Category == "ASRReplicationEvents"

| where SeverityLevel == "Critical"

Once you have the query that filters for critical events, you can create an alert rule in Azure Monitor based on this query. Alerts created this way can be configured to send emails (notifications) when critical ASR events occur.

Create an Azure Automation Runbook:

• Azure Automation allows you to run PowerShell or Python scripts in response to alerts.
• You can create an alert in Azure Monitor that triggers a runbook. Inside the runbook script, you can filter events from ASR based on severity (or any other criteria) and then send an email notification.
• This approach gives you more flexibility in handling alerts and notifications beyond what Azure Monitor's basic alerting might offer.

Hope this helps. Please write back to us if you have any questions.

---

If the response helped, do "Accept Answer" and up-vote it