Get-AzAlertHistory

Gets the history of classic alert rules.

Syntax

Get-AzAlertHistory
   [-ResourceId <String>]
   [-StartTime <DateTime>]
   [-EndTime <DateTime>]
   [-Status <String>]
   [-Caller <String>]
   [-DetailedOutput]
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

Description

The Get-AzAlertHistory cmdlet gets the history of classic alert rules as they are enabled, disabled, fired, resolved, and so on.

Examples

Example 1: Get the alert history

Get-AzAlertHistory -StartTime 2015-02-11T11:00:00 -EndTime 2015-02-11T12:00:00 -DetailedOutput

Authorization        :
Caller               : Microsoft.Insights/alertRules
Claims               :
                       http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId        : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzg4ODU3OTI5OTI2
Description          : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' has been resolved for Website:
                       garyyang1 (Default-Web-EastUS)
EventDataId          : 769fab1c-fc9f-4e18-bc3a-fa79fbdd3616
EventName            : Alert
EventSource          : Microsoft.Insights/alertrules
EventTimestamp       : 2/11/2015 7:14:45 PM
HttpRequest          :
Id                   : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/events/769fab1c-fc
                       9f-4e18-bc3a-fa79fbdd3616/ticks/635592788857929926
Level                : Informational
OperationId          : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzg4ODU3OTI5OTI2
OperationName        : ResolveAlert
Properties           :
                       RuleUri        : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
                       EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
                       RuleName       : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
                       RuleDescription:
                       Threshold      : 3
                       WindowSizeInMinutes: 5
                       Aggregation    : Total
                       Operator       : GreaterThan
                       MetricName     : CpuTime
                       MetricUnit     : Count
ResourceGroupName    : Default-Web-EastUS
ResourceProviderName : Microsoft.Insights
ResourceId           : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
Status               : Resolved
SubmissionTimestamp  : 2/11/2015 7:14:45 PM
SubscriptionId       : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus            :
Authorization        :
Caller               : Microsoft.Insights/alertRules
Claims               :
                       http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId        : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
Description          : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' was activated for Website: garyyang1
                       (Default-Web-EastUS)
EventDataId          : 66277c94-2097-4f5f-860d-e585f1206cd7
EventName            : Alert
EventSource          : Microsoft.Insights/alertrules
EventTimestamp       : 2/11/2015 7:04:46 PM
HttpRequest          :
Id                   : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       microsoft.web/sites/garyyang1/events/66277c94-2097-4f5f-860d-e585f1206cd7/ticks/6355927828650595
                       14
Level                : Error
OperationId          : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
OperationName        : ActivateAlert
Properties           :
                       RuleUri        : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
                       EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
                       RuleName       : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
                       RuleDescription:
                       Threshold      : 3
                       WindowSizeInMinutes: 5
                       Aggregation    : Total
                       Operator       : GreaterThan
                       MetricName     : CpuTime
                       MetricUnit     : Count
ResourceGroupName    : Default-Web-EastUS
ResourceProviderName : microsoft.web
ResourceId           : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
                       microsoft.web/sites/garyyang1
Status               : Activated
SubmissionTimestamp  : 2/11/2015 7:04:46 PM
SubscriptionId       : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus            :
Authorization        :
Caller               : Microsoft.Insights/alertRules
Claims               :
                       http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId        : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
Description          : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' was activated for Website: garyyang1
                       (Default-Web-EastUS)
EventDataId          : ec9f7b3c-c6ea-4b45-bd15-ff43e38491e3
EventName            : Alert
EventSource          : Microsoft.Insights/alertrules
EventTimestamp       : 2/11/2015 7:04:46 PM
HttpRequest          :
Id                   : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/events/ec9f7b3c-c6
                       ea-4b45-bd15-ff43e38491e3/ticks/635592782865059514
Level                : Error
OperationId          : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
OperationName        : ActivateAlert
Properties           :
                       RuleUri        : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
                       EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
                       RuleName       : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
                       RuleDescription:
                       Threshold      : 3
                       WindowSizeInMinutes: 5
                       Aggregation    : Total
                       Operator       : GreaterThan
                       MetricName     : CpuTime
                       MetricUnit     : Count
ResourceGroupName    : Default-Web-EastUS
ResourceProviderName : Microsoft.Insights
ResourceId           : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
Status               : Activated
SubmissionTimestamp  : 2/11/2015 7:04:46 PM
SubscriptionId       : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus            :

This command gets the alert history for the specified time frame for the current subscription.

Example 2: Get alert history for a specified resource

Get-AzAlertHistory -StartTime 2015-02-11T11:00:00 -EndTime 2015-02-11T12:00:00 -ResourceId "/subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1" -DetailedOutput

Authorization        :
Caller               : Microsoft.Insights/alertRules
Claims               :
                       http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId        : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzg4ODU3OTI5OTI2
Description          : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' has been resolved for Website:
                       garyyang1 (Default-Web-EastUS)
EventDataId          : 769fab1c-fc9f-4e18-bc3a-fa79fbdd3616
EventName            : Alert
EventSource          : Microsoft.Insights/alertrules
EventTimestamp       : 2/11/2015 7:14:45 PM
HttpRequest          :
Id                   : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/events/769fab1c-fc
                       9f-4e18-bc3a-fa79fbdd3616/ticks/635592788857929926
Level                : Informational
OperationId          : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzg4ODU3OTI5OTI2
OperationName        : ResolveAlert
Properties           :
RuleUri        : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
                       EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleName       : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleDescription:
Threshold      : 3
WindowSizeInMinutes: 5
Aggregation    : Total
Operator       : GreaterThan
MetricName     : CpuTime
MetricUnit     : Count
ResourceGroupName    : Default-Web-EastUS
ResourceProviderName : Microsoft.Insights
ResourceId           : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
Status               : Resolved
SubmissionTimestamp  : 2/11/2015 7:14:45 PM
SubscriptionId       : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus            :
Authorization        :
Caller               : Microsoft.Insights/alertRules
Claims               :
                       http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId        : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
Description          : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' was activated for Website: garyyang1
                       (Default-Web-EastUS)
EventDataId          : ec9f7b3c-c6ea-4b45-bd15-ff43e38491e3
EventName            : Alert
EventSource          : Microsoft.Insights/alertrules
EventTimestamp       : 2/11/2015 7:04:46 PM
HttpRequest          :
Id                   : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/events/ec9f7b3c-c6
                       ea-4b45-bd15-ff43e38491e3/ticks/635592782865059514
Level                : Error
OperationId          : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
                       cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
                       LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
                       LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
OperationName        : ActivateAlert
Properties           :
RuleUri        : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
                       EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleName       : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleDescription:
Threshold      : 3
WindowSizeInMinutes: 5
Aggregation    : Total
Operator       : GreaterThan
MetricName     : CpuTime
MetricUnit     : Count
ResourceGroupName    : Default-Web-EastUS
ResourceProviderName : Microsoft.Insights
ResourceId           : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
                       Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
Status               : Activated
SubmissionTimestamp  : 2/11/2015 7:04:46 PM
SubscriptionId       : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus            :

This command gets the alert rule-related events for a specified resource.

Parameters

-Caller

Specifies the caller.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-DefaultProfile

The credentials, account, tenant, and subscription used for communication with azure

Type:IAzureContextContainer
Aliases:AzContext, AzureRmContext, AzureCredential
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DetailedOutput

Displays full details in the output.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-EndTime

Specifies the end time of the query in local time. The default is the current time.

Type:Nullable<T>[DateTime]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-ResourceId

Specifies the resource ID the rule is associated with.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-StartTime

Specifies the start time of the query in local time. The default is the current local time minus one hour.

Type:Nullable<T>[DateTime]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Status

Specifies the status.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

Inputs

String

Nullable<T>[[System.DateTime, System.Private.CoreLib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]

SwitchParameter

Outputs

PSEventData