Received multiple alert emails from different servers for the same alert defined in Log Analytics workspace

Liu, Yanna 21 Reputation points
2022-06-22T18:04:33.48+00:00

Hi ,

I received multiple emails for the same alert defined in log analytics workspace from different servers (Sev0 and Sev3)
alert at different time:

Fired:Sev0 Azure Monitor Alert *************** ( microsoft.operationalinsights/workspaces ) at 6/22/2022 8:21:20 AM

Fired:Sev3 Azure Monitor Alert *************** ( microsoft.resources/subscriptions/resourcegroups ) at 6/22/2022 9:37:57 AM

If you above two lines, they are from different server, I believe one is the backup for the log analytic server with different time zoon,
but if one server is fired the alter, the backup should not be fired.

Is this a bug?

Thanks

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,452 questions
0 comments No comments
{count} votes

Accepted answer
  1. Mike Urnun 9,836 Reputation points Microsoft Employee
    2022-06-22T20:38:11.76+00:00

    Hello @Liu, Yanna - Thanks for posting on MS Q&A! These appear to be different alerts (resources they fired upon appear different: microsoft.operationalinsights/workspaces vs microsoft.resources/subscriptions/resourcegroups) with different Severity levels?


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.