How do I setup an alert in Azure for failed Azure SQL login?

Adrian Bear (ThorApps) 1 Reputation point
2021-07-25T07:56:20.563+00:00

Hi,

We host a number of Azure databases for Customers across a number of different Azure regions in different Azure SQL Servers.
These databases use a combination of AAD and SQL Authentication.
I'd like to get an alert if there is a series of failed login attempts to any of these databases.

I have setup Azure Log Analytics, and configured all servers to pipe their audit logs to the Log Analytics workspace. But I can't see any SQL Authentication failed options to create an Alert from.

Could I get some help please? Or is this not possible in Azure and Azure SQL.

Thanks
Adrian

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,272 questions
Azure SQL Database
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Manu Philip 18,561 Reputation points MVP
    2021-07-25T18:10:25.26+00:00

    Enable Diagnostic Settings under monitoring on each Database and Add a diagnostic settings. Give the log analytics as the destination on errors generated. Now under Log Analytics > Alerts > Setup the alert group where you can configure an email address to alert the login issues

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.