ALert meachanisum if virtual machine is not there in the update manager

Varma 1,385

ALert mechanism if virtual machine is not there in the update manager, is there any way to set alert in this condition

Please suggest

1 answer

Gowtham CP 5,295 Reputation points

2024-05-11T17:02:11.1+00:00

Hello @Varma

Thanks for reaching out in the Microsoft Q&A!

Yes, you can set up an alert mechanism in Azure Monitor to notify you if a virtual machine is missing from the update manager. First, enable the Alerts (Preview) feature in Azure Update Manager. Then, create a new alert rule within Azure Update Manager, specifying a custom query to check for missing virtual machines. Define the alert's scope, logic, severity, and notification actions. Once configured, Azure Monitor will automatically monitor for missing VMs and send alerts based on your defined criteria, ensuring you stay informed of any issues with update management.

If you found this solution helpful, consider accepting it.
Please sign in to rate this answer.
Varma 1,385 Reputation points

2024-05-12T06:44:57.15+00:00

Hi Gowtham,

Could you please clarify my following follow up questions:

I dont find alert feature in Azure update manager, can you give me screenshot and more info about it?

So can we create alert rule from Azure update manger?

Please share me the respective custom query?

If VM is not there in azure update manager, we want to alert, irrespective of alert

Gowtham CP 5,295 Reputation points

2024-05-12T13:41:44.9533333+00:00

Hello Varma,

The alert feature in Azure Update Manager is in preview, so it might not be visible directly. Access it through Azure Monitor, which integrates with Update Manager. Once enabled, you can create alert rules for Update Manager.

Yes, you can create alert rules within Azure Update Manager, but the rule creation process happens through Azure Monitor, which Update Manager integrates with.

ResourceUri | where ResourceType == 'Microsoft.Compute/virtualMachines' | where not exists( union ( VMInventory | where (toLower(VMName) == toLower('<VM_Name_Here>')) ) )
4.Set up a separate alert rule for missing VMs to receive notifications regardless of other conditions in Update Manager.Set up a separate alert rule for missing VMs to receive notifications regardless of other conditions in Update Manager. If the response was beneficial, kindly consider upvoting or accepting it as the answer. Thank you!

Varma 1,385 Reputation points

2024-05-12T16:51:55.06+00:00

Hi Gowtham,

Could you please clarify my following follow up questions:

How Azure Monitor can be integrated with Azure Update manager? please provide me screenshots.

Also please clarify where exactly I need to SQL query? and I am referring virtual machine across subscription, not particular VM.

I have tried but i have no idea about query which would work and send notification for missing in Azure update manger.

Looking Forword for your response.

Gowtham CP 5,295 Reputation points

2024-05-12T17:34:39.7533333+00:00

Hello Varma,

I hope these steps will help clarify your doubts:

1. Enable Alerts (Preview) in Azure Update Manager:

Access Azure Update Manager through Azure Monitor.

No specific integration steps are required; it's built-in.

Documentation: https://learn.microsoft.com/en-us/azure/automation/update-management/configure-alerts

2. Create an Alert Rule in Azure Monitor:

Log in to the Azure portal.

Navigate to Monitor > Alerts.

Click + Create and select Alert rule.

3. Configure the Alert Rule:

Resource: Select the Azure subscription containing your virtual machines.

Signal: Choose Log for the signal type.

Query: Use the provided custom Log query

union ( ResourceUri | where ResourceType == 'Microsoft.Compute/virtualMachines' | where not exists( union ( VMInventory | where (toLower(VMName) == toLower('<VM_Name_Here>')) ) ) ) | where subscriptionId == '<subscription_id>'

4. Additional Configurations:

Set the Severity and Alert logic .

Configure Notifications to receive alerts via email, SMS, etc.

5. Save the Alert Rule:

Test the rule to ensure it functions correctly.

You can create separate rules for different scenarios.

Gowtham CP 5,295 Reputation points

2024-05-14T06:35:08.9233333+00:00

Hello Varma,

We haven't heard back from you. Could you please provide an update on your issue? If you have any questions or concerns, feel free to reach out to us. If the information provided has been helpful, please consider marking it as the accepted answer to close this case. Doing so will assist others with similar questions in finding solutions more easily.

Varma 1,385 Reputation points

2024-05-14T07:01:22.9166667+00:00

HI Gowtham,

Thank you for follow up.

Above steps are not working . for me.

I am trying to find out query which has to fetch the information about VM is available in maintenance configuration or not?

based on this requirement, can you suggest me what are all parameters I supposed to use in the resource graph query so that it will give relevant information.

I am making an effort, but I am not obtaining anything. Please suggest.

I am seeing following error

Please let me know your suggestions and fix on this, thank you.

Diptesh Kumar 101 Reputation points

2024-05-17T02:57:22.68+00:00

HI Gowtham,

just checking whether did you get a chance to look on above comment?

adding my findings below:

I have prepared below query which should fetch maintenanceconfiguraiton id, however in the output it is not showing the result. Please suggest and also could you please prepare updated query.

resources

| where type =~ 'microsoft.compute/virtualmachines'

| extend maintenanceconfigurationID = tostring(properties.maintenanceconfigurationId)

Gowtham CP 5,295 Reputation points

2024-05-17T04:48:24.2566667+00:00

Hi Varma Diptesh Kumar ,

Sorry for the late reply.

Please try this query:

resources | where type =~ 'microsoft.compute/virtualmachines' | project id, type | extend maintenanceConfigurationId = tostring(coalesce(properties.maintenanceConfigurationId, '')) | where isnotempty(maintenanceConfigurationId)

I've made a few changes to improve the query. It now projects the id and type columns, extends the maintenanceConfigurationId column by converting the value to a string , and filters to only include virtual machines with a maintenanceConfigurationId set. This should give you the desired results.

Don't forget to upvote! If you found this solution helpful, consider accepting it.

Diptesh Kumar 101 Reputation points

2024-05-17T04:55:34.8733333+00:00

Hi Gowtham,

1.

I executed above query, why it is giving bad request, Please suggest

2.

why it is given as "isnotempty" in the last line, what does it will do?

Looking forword for your response. Thank you.

Gowtham CP 5,295 Reputation points

2024-05-17T13:01:18.97+00:00

Hello Diptesh Kumar ,

Your Azure Resource Graph query likely resulted in a "Bad Request" error due to syntax issues(line numbers as they're not part of the valid syntax). Below is the corrected query:

resources | where type =~ 'microsoft.compute/virtualmachines' | project id, type | extend maintenanceConfigurationId = tostring(coalesce(properties.maintenanceConfigurationId, '')) | where isnotempty(maintenanceConfigurationId)

2.The isnotempty function filters virtual machines with a non-empty maintenance configuration ID. This ensures that only VMs with a maintenance configuration set are returned in the results. Execute the corrected query to retrieve the desired information.

Diptesh Kumar 101 Reputation points

2024-05-17T13:09:18.2066667+00:00

HI Gowtham,

1.

I have executed above query, came up with following error message:

Please provide below info when asking for support: timestamp = 2024-05-17T13:07:42.3711647Z, correlationId = ca5aa5c3-6eac-4195-8a7c-22630d006a6b. (Code:BadRequest) Details: Query is invalid. Please refer to the documentation for the Azure Resource Graph service and fix the error before retrying. (Code:InvalidQuery) Ensure that expression: properties.maintenanceConfigurationId is indeed a simple name (Code:Default) 'extend' operator: Failed to resolve scalar expression named 'properties.maintenanceConfigurationId' (Code:Operator_FailedToResolveEntity) Failed to analyze expression for extended column ["maintenanceConfigurationId"] (Code:InvalidExtendedExpression)

2.

But in the end we are looking for VM list which should not be part of maintenance configuration, correct? can we get that?

Gowtham CP 5,295 Reputation points

2024-05-17T13:21:26.26+00:00

Hello Diptesh Kumar ,

Sorry for the Confusion! If you are looking for list of virtual machines that are not configured with any maintenance settings. Kindly use this query,

resources | where type =~ 'microsoft.compute/virtualmachines' | project id, name, type | where isempty(properties.maintenanceConfigurationId)

Diptesh Kumar 101 Reputation points

2024-05-17T13:26:01.22+00:00

Hi Gowtham.

I see output as below still with same error.

am I executing in wrong place? if so please provide me screeshot of navigation steps
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

ALert meachanisum if virtual machine is not there in the update manager

1 answer

Your answer