Loading...

Azure Monitor Availability alerts using Resource Graph Queries

Azure Monitor Availability alerts using Resource Graph Queries

We recently announced how you can use Azure Log Analytics to create alerts on Azure Resource Graph queries. Here, I wanted to discuss possible scenarios and examples on how this can be used to check the availability for services across Azure and even on Azure Arc enabled resources.

 

Azure Resource Graph queries

Azure Resource Graph is a service within Azure that enhances Azure Resource Management. It allows you to explore resources efficiently and quickly by running queries across a specific group of subscriptions. These queries are written in the Kusto Query Language (KQL), which is a widely used format with other Azure services like Log Analytics.

 

Trivia: Most of the screens you see on Azure portal give you an option to check the KQL query behind getting that data.

 

shishirgarde_0-1711432199613.png

 

 

Using Graph queries to generate alerts

Earlier, it was only possible to generate alerts using Log Analytics queries or Metrics. Now, the alerts can be generated on Azure Resource Graph queries. This can really help with setting up the availability alerts for most of the Azure services. Let us take a look at it with some examples.

 

SQL Managed Instance Availability

SQL MI supports various types of Metrics and Logs with Azure Monitor. However, sometimes, customers only want to receive a simple alert on whether the instance is up or down. ARG query can let you know the state of the instance which can be further converted to an alert.

 

Resources | where type == "microsoft.sql/managedinstances" | project name, state = tostring(properties.state)

 

The above query can give you the current state of the SQL MI instance.

 

shishirgarde_1-1711432199615.png

 

Now, this same query can be converted to an alert. The idea is to check if the SQL MI instance is in any other state than “Ready” and generate the alert. For this, we can write something like this:

 

Resources | where type == "microsoft.sql/managedinstances" | extend state = tostring(properties.state) | extend available = iif(state=="Ready" ,1 ,0) | project name, available

 

Result:

 

shishirgarde_2-1711432199617.png

 

To convert this into an alert, go to Monitor – Alert Rules section and create a new one.

You will have to select a Log Analytics workspace (logs are not stored in LA workspace, it is only used to generate the alerts) as the scope.

 

On the Conditions page, configure the following:

shishirgarde_3-1711432199625.png

 

 

shishirgarde_4-1711432199628.png

 

If you look in the configuration, we are checking the average of “available” parameter every 5 minutes and if it is anything less than 1, then an alert can be triggered.

The rest of the alert’s screens are standard. You can set up an email alert, or call a webhook or Logic App etc.

 

Conclusion

You can use the above logic to get details on Azure and Azure Arc enabled resources and create alerts from the same. For e.g. to generate an alert for Azure Arc enabled servers on their connection state, this can be used:

resources | where type == 'microsoft.hybridcompute/machines' | extend state = tostring(properties.status) | extend connected = iif(state=="Connected" ,1 ,0) | project name, connected

 

Published on:

Learn more
Azure Governance and Management Blog articles
Azure Governance and Management Blog articles

Azure Governance and Management Blog articles

Share post:

Related posts

Microsoft Sales Agent in Outlook and Teams: What It Means for Dynamics 365 Sales Add-Ins

If you have worked with Microsoft Dynamics 365 Sales for any amount of time, you already know the story. Your sales team spends most of their ...

7 hours ago

Announcing the Public Preview of Azure Cosmos DB Shell: Open-Source Power Meets AI-Driven Database Automation

 Today, we’re thrilled to announce the public preview of Azure Cosmos DB Shell – a powerful, open-source command-line interface that rev...

11 hours ago

Track notifications delivery for Storyline Announcements in Viva Engage

A new Notifications Delivery Tracker for Storyline Announcements in Viva Engage will launch worldwide in mid-May 2026, providing real-time del...

13 hours ago

Microsoft 365 Copilot Cowork: Plugins, connectors, and partner integrations (Frontier)

Microsoft 365 Copilot Cowork is expanding with plugins, connectors, and partner integrations for Frontier participants starting May 2026. It e...

13 hours ago

Updates available for Microsoft 365 Apps for Current Channel

We’ve released updates to the following update channel for Microsoft 365 Apps: Current Channel When this will happen: We’ll be gra...

13 hours ago

Microsoft Purview | Data Loss Prevention- DLP to restrict processing external emails in M365 Copilot and Copilot Chat

Microsoft Purview is adding a new Data Loss Prevention (DLP) control for Microsoft 365 Copilot and Copilot Chat to exclude external emails fro...

13 hours ago
Stay up to date with latest Microsoft Dynamics 365 and Power Platform news!
* Yes, I agree to the privacy policy