Resources Table in Log Analytics workspace

Sanjay Khandelwal 5 Reputation points
2023-01-16T06:22:05.3933333+00:00

Hello,

I can locate ‘Resources’ table in Azure Resource Graph Explorer. However, I want to create alerts based on Resources Table data in Log Analytics workspace. Can anyone please update How can we get this ‘Resources ‘table in Log Analytics workspace and then create Azure monitor alert?

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,426 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Luke Murray 11,246 Reputation points MVP
    2023-01-16T09:13:39.89+00:00

    The Resource table will include data about ALL references.

    You can create an alert from a log analytics query here: https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/tutorial-log-alert

    What specifically are you after?


  2. AnuragSingh-MSFT 21,471 Reputation points
    2023-01-17T10:08:29.2266667+00:00

    Sanjay Khandelwal, there is no direct way to integrate resource graph with Log Analytics. Based on your question and subsequent comment, I see that you are trying to create an alert for resource provisioning. You could do it in 2 different ways

    1. Using Activity Logs - The Azure Monitor activity log is a platform log in Azure that provides insight into subscription-level events. The activity log includes information like when a resource is created, modified or a virtual machine is started. This log can be forwarded to Log Analytics workspace, and you can query the logs and generate alert as required. Please see the following link for more details - Send Activity Logs to Log Analytics workspace
    2. Logic Apps - The idea here is to periodically query resource graph explorer and generate email notification (alert generation is not readily available but can be achieved with some workarounds). The following link has basic concept for it - Create Azure Resource Graph Explorer Scheduled Reports and Email Alerts

    Hope it helps. Please let me know if you have any questions.

    Please 'Accept as answer' if it helped so that it can help others in the community looking for help on similar topics.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.