Hi @Zhongliang Shu ,
Please note that not all events are captured in activity logs. Resource health events are sent to activity logs, but not all resource health transitions are recorded in the activity log.
A resource health is recorded in the activity log when:
- An annotation is submitted for a resource like VM [annotation is a label or note that provides more information about the health of a resource. For example: ResourceDegraded: Indicates that the resource's performance or functionality is degraded. AccountClientThrottling: Indicates that the resource is being throttled due to excessive requests or usage.]. Here, you need to note - not all annotations are submitted for a resource such as Transient issues less than 35 seconds.
- A resource transitioned to or from Unhealthy.
- A resource was unhealthy for more than 15 mins.
- A transition to Unknown state if: This is the first transition. If the state prior to Unknown is the same as the new state after. (For example, if the resource transitioned from Healthy to Unknown and back to Healthy). For compute resources: VMs that transition from Healthy to Unhealthy, and back to Healthy, when the Unhealthy time is less than 35 seconds.
Hope this helps.
You can refer Microsoft documentation where its explained clearly about the missing VM downtime in activity log. Refer here.
Resource health overview link - https://learn.microsoft.com/en-us/azure/service-health/resource-health-overview
Thank You!
Preetha