The article discusses a way to personalize multiple thresholds in log analytics alerts. The solution involves using a CSV file, a PowerShell script, a custom log table, and an Amazing Log Kusto query. This approach allows all the logic to be put in the Kusto query.Bullet Points:
Personalizing Multiple Thresholds in Log Analytics Alerts
Multiple thresholds in Log Analytics Alerts can now be personalized, thanks to a new feature from Microsoft. This feature allows users to create customized alerts for each server and performance counter.
What’s New?
The new feature allows users to set specific thresholds for each server and performance counter. In case there is no specific server, the alert will use a generic threshold.
“This article has been created for a customer that wants to be able to create an alert for customized thresholds for each existing server and performance counter.”
How To Achieve This?
There are several steps involved in setting up this feature, but it’s all about putting the logic in the Kusto query. The solution is composed of a CSV file, a PowerShell script, a custom log table, and an Amazing Log Kusto query.
CSV File
The CSV file will contain all the necessary information for setting up the alerts. This includes the server names, performance counters, and the thresholds for each.
PowerShell Script
The PowerShell script is used to read the CSV file and send the data to the custom log table in Azure Log Analytics.
Custom Log Table
The custom log table is where all the data from the CSV file is stored. This table is then queried by the Amazing Log Kusto query to generate the alerts.
Amazing Log Kusto Query
The Amazing Log Kusto query is the final piece of the puzzle. It uses the data from the custom log table to generate the alerts based on the thresholds set in the CSV file.
“This allows you to put all the logic in the Kusto query.”
Why Is This Important?
This feature provides a new level of customization for Log Analytics Alerts. It allows users to set specific thresholds for each server and performance counter, providing a more personalized and efficient alert system.
From the Core Infrastructure and Security Blog
Windows Server Devices Now Recognized as a New OS in Intune Microsoft has announced that Windows Server devices are Read more
Microsoft Power Platform is leading the way in AI-generated low-code app development. With the help of AI, users can quickly Read more
Microsoft Intune is an enterprise mobility management platform that helps organizations manage mobile devices, applications, and data. The October edition Read more
Microsoft Intune is a cloud-based service that helps organizations manage and secure their mobile devices and PCs. The December edition Read more
