CODEWITHSUNDEEP
azurealertkqlazure-monitoring
greatvovan
greatvovan

Reputation: 3177

Why is my Azure Monitor Alert table empty?

I set up a few alerts as log searches over my LAW. They work fine, but I am trying to find a queryable log of firing or changing state, for which I am looking into Alert table. As per the documentation, it is what I need, but in my case this table is absolutely empty. I tried to query it both from the LAW my alerts work over and from Azure Monitor / Logs – result is the same.

Why is this table shown empty to me?

EDIT: I am not sure if it's important, but the alert is defined as follows:

print minute = datetime_part('minute', now())
| where minute < 30

Alerting condition is RowCount > 0. It is simply an alert that changes firing state every 30 minutes. I have two version of the alert: stateful and stateless. The alerts work great and trigger the action group as configured. I am just struggling to match the Microsoft documentation in regard to tables like Alert, AlertHistory.

Upvotes: 0

Views: 60

Answers (1)

wenbo
wenbo

Reputation: 1506

I have just test, it work well at my side.

Alerts created by log alerts rules and SCOM alerts collected through Alert Management solution.

Check your alert rule has the signal type = log search

enter image description here

My test result:

enter image description here

Upvotes: 0

Related Questions