To stop unwanted notifications from Log Analytics workspace alerting service

Question

Hi there,
We setup a Azure Monitor alert notifications for long running jobs (i.e., 4 Hrs) with below query rule.

ADFPipelineRun

And somehow it is generating email for a job that completes within a minute and it is showing incorrect Run end values in the insights of the email as shown below even though the system parameters are valid.

Could you please provide the cause and resolution to eradicate this.

Thanks in advance!

Answer 1

The logic seems to have some contradictions. Why? Because you're looking for InProgress runs with a status of Succeeded, Failed or Cancelled.This doesn't make sense because a run cannot simultaneously have both InProgress and one of the other statuses. This might explain the unexpected results you're seeing.

Consider simplifying the query. If you're trying to get alerts for jobs that are in progress for more than 4 hours, you can use:

ADFPipelineRun
| where Status == "InProgress"
| where datetime_diff('minute', now(), Start) > 240