I configured and set up the Alert in Azure monitor. It doesn't firewall as it supposed to

Benna Su 0 Reputation points
2023-12-15T07:17:44.17+00:00

I configured and set up the Alert in Azure monitor. It was supposed to fire when the condition - any new resources creation, meet;but it's not working even i believe i configured all the details regarding Alert rules and action group. Below is my configuration, please take a look.

User's image

User's image

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,411 questions
{count} votes

1 answer

Sort by: Most helpful
  1. AnuragSingh-MSFT 21,466 Reputation points
    2023-12-20T05:58:14.9766667+00:00

    Benna Su, Thank you for posting this question on Microsoft Q&A.

    I reviewed the settings as shared in the question and it seems correct. Here are some additional things that you may consider for troubleshooting it

    1. Ensure that you have enabled the Activity Log forwarding to Log Analytics workspace - Send to Log Analytics workspace
    2. Run the query in the Log Analytics Log and check if you are getting the desired result.
    3. If you get the desired results from the logs, use the "View result and edit query in the Logs" as shown below to ensure that the log based alert rule is being created for the correct LA workspace where the activity log is getting forwarded to:

    User's image

    1. Finally, check the "Alerts" view to ensure that the alert is not getting filtered out based on the criteras set (alert was filed but got hidden due to filter)

    User's image

    Hope this helps.

    If the answer did not help, please add more context/follow-up question for it, and we will help you out. Else, if the answer helped, please click Accept answer so that it can help others in the community looking for help on similar topics.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.