Does my kusto query affect the search result fields in the Application Insights common alert schema?

Question

Does my kusto query affect the search result fields in the Application Insights common alert schema?

Suzanne K 6

Hi,

In Application Insights, I've written a KQL/Kusto query that extends fields from customDimensions into proper columns which are then projected for the search result. This query is part of an alert/action group that triggers an Azure function. When the function is triggered, the search results are sent to the function as a json payload. My question is, if I enable the common alert schema, will the search results be presented in the same form dictated by my Kusto query, or do the column settings revert to those of the common alert schema?

Thanks in advance!!!
Suzanne

olufemia-MSFT 2,861 Reputation points

2020-11-19T04:22:47.013+00:00

Really good question, @Suzanne K . Checking internally to better understand the Schema hierarchy and if your column settings revert. Curious what the result was in your lab. did you see the column settings change back to that of the common alert schema?

1 answer

Your answer

olufemia-MSFT 2,861 Reputation points

2020-11-19T04:22:47.013+00:00

Really good question, @Suzanne K . Checking internally to better understand the Schema hierarchy and if your column settings revert. Curious what the result was in your lab. did you see the column settings change back to that of the common alert schema?

Answer 1

Suzanne K 6

Hi @olufemia-MSFT, thanks! I just set up remote debugging and was able to check the incoming json payload, and it does indeed provide the columns that are specified in my query :)

olufemia-MSFT 2,861 Reputation points

2020-11-20T17:13:47.357+00:00

thanks for confirming, @Suzanne K . I can also confirm the same. Please dont hesitate to ping if you have any followup questions.
Have a good weekend.

Share via

Does my kusto query affect the search result fields in the Application Insights common alert schema?

1 answer

Your answer