Announcing the Public Preview of Alerting on Azure Resource Graph
Azure Resource Graph is an Azure service designed to provide efficient and performant resource exploration with the ability to query at scale across a given set of subscriptions so that you can effectively govern your environment. While customers could provide complex queries to get visibility into their environments, there was no easy way to proactively identify issues and get notified.
We are happy to announce that you can enable alerts on Azure Resource Graph queries using Azure Monitor alerting. With this feature, you have the option to customize alerts based on the results of your ARG (Azure Resource Graph) queries. This means that not only can you gain insights from your resource data, but you can also take proactive actions when predefined criteria are met.
How to Get Started
To create an alert on ARG queries, you need to have a Log Analytics Workspace and a Managed identity with reader permission for the resource. Here is a basic guide to help you set up your first ARG alert.
- Go to Azure portal to access Azure Monitor and click on either Alerts or Logs.
- From the Logs query builder, craft Azure Resource Graph queries and execute them to obtain results by utilizing the specified prefix arg("").Table_name as shown in the picture below.
arg("").resourcechanges | extend Target = tostring(properties.targetResourceType), changeType = tostring(properties.changeType), targetResourceId = tostring(properties.targetResourceId), timestamp = todatetime(properties.changeAttributes.timestamp), correlationId = todatetime(properties.changeAttributes.correlationId) | where changeType == "Delete" - After checking the results, click on “New alert rule” and follow the steps from choosing the Log Analytics workspace previously created as the scope of the rule execution to “create” the alert rule.
Sample Scenarios & Examples
Alert on Failed update runs
Alert on VMs (Virtual Machines) needing patches
Related Resources
To learn about this exciting capability, refer to:
- How Azure Resource Graph uses alerts to monitor resources - Azure Resource Graph | Microsoft Learn
- Create Azure Monitor alert rules - Azure Monitor | Microsoft Learn
- Troubleshoot Azure Resource Graph alerts - Azure Resource Graph | Microsoft Learn
- Managed identities for Azure resources | Microsoft Learn
This is one of many features that we plan to bring to you for rich alerting capabilities on Azure Resource Graph queries. We want to build features that will help you quickly identify issues within your IT landscape, which is why we would appreciate your feedback and collaboration opportunity here . We look forward to working with you as we build out the alerting on Azure Resource Graph capabilities.
Happy Alerting!
Feedback
If you have any feedback for Azure Resource Graph service, post your ideas here. If you're just getting started with Azure Resource Graph, you can learn about the service here and follow us on Twitter for the latest updates.
Published on:
Learn moreRelated posts
How to Remove Teams Chat Threads with PowerShell
Sometimes, Microsoft 365 tenants need to remove problematic Teams chat threads from user view. The usual reason is because someone posted some...
Microsoft Teams: Granular channel notification settings
Microsoft Teams will introduce granular channel notification presets—All new messages, Mentions and replies, and Mute—with further customizati...
Microsoft 365 Copilot: Legal agent available in Frontier worldwide
Microsoft is expanding the Legal agent in Microsoft 365 Copilot for Word to Frontier users worldwide in Public Preview starting mid-June 2026,...
Microsoft Teams: RTMP-In port and domain changes required
Microsoft Teams will update RTMP-In port and domain requirements by mid-July 2026 to improve streaming reliability. Admins must allow outbound...
Updates available for Microsoft 365 Apps for Semi-Annual Enterprise Channel
We’ve released updates to the following update channel for Microsoft 365 Apps: Semi-Annual Enterprise Channel When this will happen: We&...
Microsoft Defender for Office 365: Localized default mark and notify email template
Microsoft Defender for Office 365 will localize the default “Mark and notify” email template based on users’ Outlook languag...
Microsoft Teams: Governance for built-in agents in the Teams admin center
Microsoft Teams is introducing a centralized governance experience in the Teams admin center for built-in agents like Channel Agent, Facilitat...
Microsoft 365 Backup: Full workload backup for SharePoint, OneDrive, and Exchange
Microsoft 365 Backup introduces Full Workload Backup for SharePoint, OneDrive, and Exchange, enabling admins to protect entire workloads with ...
Microsoft Teams: Human interpreter listening mode supported in Teams Rooms on Windows
Teams Rooms on Windows with Teams Rooms Pro will support human interpreter listening mode starting July 2026, allowing participants to select ...
Updates available for Microsoft 365 Apps for Monthly Enterprise Channel
We’ve released updates to the following update channel for Microsoft 365 Apps: Monthly Enterprise Channel When this will happen: We̵...