How do I alert on every event found in a custom log?

Question

I have a log file on a server that contains batch job progress and need to alert on every failure. I have setup a custom log to collect the entries and can run queries to find the failures easily enough but when it comes to alerting I'm struggling to find a solution that will actually do what I need.

We seem to be limited to time-based queries e.g. alert if 1 or more failures are found in 5 minutes. This doesn't work when you have something like this:

job1 failed 00:01
job2 failed 00:02

we would get one alert to say a failure has been found but I need two separate alerts for each job.

Is there a way to do this?

Answer 1

Hi,

Something here might help:

Custom logs in Azure Monitor
https://learn.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-custom-logs

Create, view, and manage log alerts using Azure Monitor
https://learn.microsoft.com/en-us/azure/azure-monitor/platform/alerts-log

Best regards,
Leon

Answer 2

Hi,
You basically need to alert on per instance. I have described these scenarios on one of my blog posts. Check them out.