Loading...

Announcing the Public Preview of Alerting on Azure Resource Graph

Announcing the Public Preview of Alerting on Azure Resource Graph

Azure Resource Graph is an Azure service designed to provide efficient and performant resource exploration with the ability to query at scale across a given set of subscriptions so that you can effectively govern your environment. While customers could provide complex queries to get visibility into their environments, there was no easy way to proactively identify issues and get notified. 

We are happy to announce that you can enable alerts on Azure Resource Graph queries using Azure Monitor alerting. With this feature, you have the option to customize alerts based on the results of your ARG (Azure Resource Graph) queries. This means that not only can you gain insights from your resource data, but you can also take proactive actions when predefined criteria are met.

 

How to Get Started

To create an alert on ARG queries, you need to have a Log Analytics Workspace and a Managed identity with reader permission for the resource.  Here is a basic guide to help you set up your first ARG alert.  

  1. Go to Azure portal to access Azure Monitor and click on either Alerts or Logs.  
  2. From the Logs query builder, craft Azure Resource Graph queries and execute them to obtain results by utilizing the specified prefix arg("").Table_name as shown in the picture below.
    Saandrine_0-1699904898951.pngarg("").resourcechanges | extend Target = tostring(properties.targetResourceType), changeType = tostring(properties.changeType), targetResourceId = tostring(properties.targetResourceId), timestamp = todatetime(properties.changeAttributes.timestamp), correlationId = todatetime(properties.changeAttributes.correlationId) | where changeType == "Delete"
  3. After checking the results, click on “New alert rule” and follow the steps from choosing the Log Analytics workspace previously created as the scope of the rule execution to “create” the alert rule. 

Sample Scenarios & Examples 

Alert on Failed update runs

 

arg("").maintenanceresources | extend failed = toint(properties.resourceUpdateSummary.failed), timeout = toint(properties.resourceUpdateSummary.timedout), maintenanceId = tostring(properties.maintenanceConfigurationId), EndTime = todatetime(properties.endDateTime) | where failed > 0 or timeout > 0 | where EndTime > ago(12h) | summarize Failed=count() by maintenanceId

 

 

Alert on VMs (Virtual Machines) needing patches

 

arg("").patchassessmentresources | where type has "softwarepatches" | extend id = tolower(id) | parse id with resourceId "/patchassessmentresults" * | where isnotnull(properties.kbId) | extend MissingUpdate = tostring(properties.patchName), Classification = tostring(properties.classifications[0]) | extend UpdatesNeeded = pack_array(MissingUpdate, Classification) | summarize UpdatesNeeded = make_set(UpdatesNeeded), Count= count() by resourceId

 

 

Related Resources 

To learn about this exciting capability, refer to:

 

This is one of many features that we plan to bring to you for rich alerting capabilities on Azure Resource Graph queries. We want to build featuresthat will help you quickly identify issues within your IT landscape, whichis why we would appreciate your feedback and collaboration opportunity here. We look forward toworkingwith you as we build out the alerting on Azure Resource Graph capabilities.

 

Happy Alerting!

 

Feedback 

If you have any feedback for Azure Resource Graph service, post your ideas here. If you're just getting started with Azure Resource Graph, you can learn about the service hereand follow us on Twitter for the latest updates.  

Published on:

Learn more
Azure Governance and Management Blog articles
Azure Governance and Management Blog articles

Azure Governance and Management Blog articles

Share post:

Related posts

Microsoft 365 Copilot: Video Overviews in Copilot Notebook

Microsoft 365 Copilot introduces Video Overviews in Copilot Notebooks, allowing users with a valid license to generate short, narrated video s...

20 hours ago

Microsoft 365 Copilot: Streamline SharePoint list creation with new list agent

Microsoft 365 Copilot introduces the SharePoint list agent to create SharePoint lists via natural language and structured content. Rolling out...

20 hours ago

Work or Web – Which one to use when with M365 Copilot

Work or Web? Learn which one to use when, with simple things to keep in mind or ask yourself using M365 Copilot. Related videos Check out my C...

23 hours ago

Microsoft 365 Copilot for Service – Create case records from customer emails with one click

We are announcing the ability to create case records from customer emails within Outlook in Microsoft 365 Copilot for Service. This feature wi...

2 days ago

SharePoint Framework (SPFx) roadmap update – December 2025

SPFx is powering the future of Microsoft 365. From AI-driven portals to seamless integrations across SharePoint, Teams and Viva, SPFx is drivi...

7 days ago

SharePoint Framework (SPFx) roadmap update – December 2025

SPFx is powering the future of Microsoft 365. From AI-driven portals to seamless integrations across SharePoint, Teams and Viva, SPFx is drivi...

7 days ago

Exam AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals

Following on the steps of the other AB exams I’ve been writing about my experience with (see Exam AB-730: AI Business Professional &...

7 days ago

Microsoft Copilot (Microsoft 365): Chat History Landing page: Filtering UI Refresh

To help you quickly find the conversations that matter, we’re updating the Chat History filtering experience. This refresh makes the interface...

7 days ago

Microsoft Copilot (Microsoft 365): Capture voice notes in the Microsoft 365 Copilot mobile app

With a Microsoft 365 Copilot license, transform offline discussions into structured, actionable, and searchable content with voice notes in Co...

7 days ago

Microsoft Graph PowerShell SDK V2.34 Makes WAM the Default

The Web Account Manager (WAM) authentication broker becomes the default method for handling interactive Microsoft Graph PowerShell SDK connect...

7 days ago
Stay up to date with latest Microsoft Dynamics 365 and Power Platform news!
* Yes, I agree to the privacy policy