monitoring-activity-log-alerts-on-service-notifications.md

title	description	author	services	ms.service	ms.topic	ms.date	ms.author	ms.component
Receive activity log alerts on Azure service notifications	Get notified via SMS, email, or webhook when Azure service occurs.	shawntabrizi	azure-monitor	azure-monitor	conceptual	06/09/2018	shtabriz	alerts

Create activity log alerts on service notifications

Overview

This article shows you how to set up activity log alerts for service health notifications by using the Azure portal.

You can receive an alert when Azure sends service health notifications to your Azure subscription. You can configure the alert based on:

• The class of service health notification (Service issues, Planned maintenance, Health advisories).
• The subscription affected.
• The service(s) affected.
• The region(s) affected.

Note

Service health notifications does not send an alert regarding resource health events.

You also can configure who the alert should be sent to:

• Select an existing action group.
• Create a new action group (that can be used for future alerts).

To learn more about action groups, see Create and manage action groups.

For information on how to configure service health notification alerts by using Azure Resource Manager templates, see Resource Manager templates.

Create an alert on a service health notification for a new action group by using the Azure portal

1. In the portal, select Service Health.

   

2. In the Alerts section, select Health alerts.

   

3. Select Create service health alert and fill in the fields.

   

4. Select the Subscription, Services, and Regions you want to be alerted for.

   

Note

This subscription is used to save the activity log alert. The alert resource is deployed to this subscription and monitors events in the activity log for it.

1. Choose the Event types you want to be alerted for: Service issue, Planned maintenance, and Health advisories

2. Define your alert details by entering an Alert rule name and Description.

3. Select the Resource group where you want the alert to be saved.

4. Create a new action group by selecting New action group. Enter a name in the Action group name box and enter a name in the Short name box. The short name is referenced in the notifications that are sent when this alert fires.

   

5. Define a list of receivers by providing the receiver's:

   a. Name: Enter the receiver's name, alias, or identifier.

   b. Action Type: Select SMS, email, webhook, Azure app, and more.

   c. Details: Based on the action type chosen, enter a phone number, email address, webhook URI, etc.

6. Select OK to create the action group, and then Create alert rule to complete your alert.

Within a few minutes, the alert is active and begins to trigger based on the conditions you specified during creation.

Learn how to Configure webhook notifications for existing problem management systems. For information on the webhook schema for activity log alerts, see Webhooks for Azure activity log alerts.

Note

The action group defined in these steps is reusable as an existing action group for all future alert definitions.

Create an alert on a service health notification for an existing action group by using the Azure portal

1. Follow steps 1 through 7 in the previous section to create your service health notification.

2. Under Define action group, click the Select action group button. Select the appropriate action group.

3. Select Add to add the action group, and then Create alert rule to complete your alert.

Within a few minutes, the alert is active and begins to trigger based on the conditions you specified during creation.

Create an alert on a service health notification for a new action group by using the Azure Resource Manager Templates

The following is an example that creates an action group with an email target and enables all service health notifications for the target subscription.

{
    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "actionGroups_name": {
            "defaultValue": "SubHealth",
            "type": "String"
        },
        "activityLogAlerts_name": {
            "defaultValue": "ServiceHealthActivityLogAlert",
            "type": "String"
        },
        "emailAddress":{
            "type":"string"
        }
    },
    "variables": {
        "alertScope":"[concat('/','subscriptions','/',subscription().subscriptionId)]"
    },
    "resources": [
        {
            "comments": "Action Group",
            "type": "microsoft.insights/actionGroups",
            "name": "[parameters('actionGroups_name')]",
            "apiVersion": "2017-04-01",
            "location": "Global",
            "tags": {},
            "scale": null,
            "properties": {
                "groupShortName": "[parameters('actionGroups_name')]",
                "enabled": true,
                "emailReceivers": [
                    {
                        "name": "[parameters('actionGroups_name')]",
                        "emailAddress": "[parameters('emailAddress')]"
                    }
                ],
                "smsReceivers": [],
                "webhookReceivers": []
            },
            "dependsOn": []
        },
        {
            "comments": "Service Health Activity Log Alert",
            "type": "microsoft.insights/activityLogAlerts",
            "name": "[parameters('activityLogAlerts_name')]",
            "apiVersion": "2017-04-01",
            "location": "Global",
            "tags": {},
            "scale": null,
            "properties": {
                "scopes": [
                    "[variables('alertScope')]"
                ],
                "condition": {
                    "allOf": [
                        {
                            "field": "category",
                            "equals": "ServiceHealth"
                        },
                        {
                            "field": "properties.incidentType",
                            "equals": "Incident"
                        }
                    ]
                },
                "actions": {
                    "actionGroups": [
                        {
                            "actionGroupId": "[resourceId('microsoft.insights/actionGroups', parameters('actionGroups_name'))]",
                            "webhookProperties": {}
                        }
                    ]
                },
                "enabled": true,
                "description": ""
            },
            "dependsOn": [
                "[resourceId('microsoft.insights/actionGroups', parameters('actionGroups_name'))]"
            ]
        }
    ]
}

Manage your alerts

After you create an alert, it's visible in the Alerts section of Monitor. Select the alert you want to manage to:

• Edit it.
• Delete it.
• Disable or enable it, if you want to temporarily stop or resume receiving notifications for the alert.

Next steps

• Learn how to configure webhook notifications for existing problem management systems.
• Learn about service health notifications.
• Learn about notification rate limiting.
• Review the activity log alert webhook schema.
• Get an overview of activity log alerts, and learn how to receive alerts.
• Learn more about action groups.