In this video, learn how to analyze alerts using the Azure Monitor.
- [Narrator] Alerts can be analyzed using the Azure monitor. We're in the alerts section of the Azure monitor and I'm also using the newer version of alerts and this is in preview, at the moment. From this view, we can quickly see the total number of alerts, the number of smart groups, and the number of enabled rules. One of the advantages of using the Azure monitor is that you can pull in alerts from multiple subscriptions.
You do that by simply changing your subscription. I am just gonna look at the pay-as-you-go subscription. And from here, you can see that we have five alerts, four smart groups, and we have five alerts but only four are enabled. A smart group is a group of alerts that are similar. Let's go ahead and take a look at our smart groups. The system created four smart groups. It created one for start of a VM, a second one for start of a VM- I would tend to think that those should go together- but again, remember, this is in preview.
We have a group for restarting the VM, and then we have a group for deallocate and more, and you'll notice there that the alert count is two. Let's go ahead and take a look at that smart group. And within this group, we can see the two alerts. We can drill into one of these alerts to get a little bit more information. And from here we can pop into history and more details. I'm gonna go back to my list.
I also wanna point out the alert state. You'll notice that we have one acknowledged, one closed, and three new. I'm gonna go ahead and select the restart VM so we can take a look at that alert state in a little bit more depth. Again, we have our basic information about the alert, but if I pop into history, we'll notice here that the state changed from new to acknowledged. We can see who it was changed by, and then the comment, and the comment for this is "researching why the system was rebooted." It provides a way for you to track your alerts.
If you need to change the alert state, simply select the alert, and then select change state. And here, you can change it from new to closed and then add in that comment; that comment is optional. And before we leave, let's go ahead and take a look at manage rules. Here, you'll notice the list of our five rules. We can see which ones are enabled, and which one has been disabled. I'd like to show you one of these rules because they're a little bit different than what we set up in the previous lesson.
Let's go ahead and take a look at restart VMs. And you'll notice here that our target is all virtual machines within the pay-as-you-go service. And the criteria is, when that virtual machine is restarted, that is when the alert will be triggered. As you can see, we can make our alerts very broad, or very specific to meet your needs.
- Managing Azure subscriptions and resources
- Implementing and managing storage
- Configuring and managing virtual networks
- Managing identities
- Evaluating and performing server migration to Azure
- Implementing and managing application services
- Implementing advanced virtual networking
- Securing identities