MIssing link to data sources article

Author: AbbyMSFT

articles/azure-monitor/alerts/log-alert-health.md

@@ -0,0 +1,87 @@
+---
+title: Monitor the health of your Azure Monitor Log Search alerts
+description: This article how to monitor the health of an Azure Monitor Log Search alerts.
+ms.topic: how-to
+author: AbbyMSFT
+ms.author: abbyweisberg
+ms.reviewer: nolavime
+ms.date: 02/07/2024
+
+#Customer-intent: As an Azure Monitor administrator, I want to know when there are latency issues with an Azure Monitor log search alert, so I can act to resolve the issue, contact Microsoft for support, or track that is Azure is meeting its SLA.
+---
+
+# Monitor the health of your Azure Monitor Log search alerts
+
+[Azure Service Health](../../service-health/overview.md) monitors the health of your cloud resources, including your Azure Monitor log search alerts. When a log search alert is healthy, data you collect using your query is available for analysis in a relatively short period of time, known as [latency](../logs/data-ingestion-time.md). This article explains how to view the health status of your log search alerts.
+
+Azure Service Health monitors:
+
+- [Resource health](../../service-health/resource-health-overview.md): information about the health of your individual cloud resources, such as a specific Log Analytics workspace. 
+- [Service health](../../service-health/service-health-overview.md): information about the health of the Azure services and regions you're using, which might affect your Log Analytics workspace, including communications about outages, planned maintenance activities, and other health advisories.
+
+## Permissions required
+
+- To view Log Analytics workspace health, you need `*/read` permissions to the Log Analytics workspace, as provided by the [Log Analytics Reader built-in role](./manage-access.md#log-analytics-reader), for example.
+- To set up health status alerts, you need `Microsoft.Insights/ActivityLogAlerts/Write` permissions to the Log Analytics workspace, as provided by the [Monitoring Contributor built-in role](../roles-permissions-security.md#monitoring-contributor), for example.
+
+## View Log Analytics workspace health and set up health status alerts 
+
+
+To view your Log Analytics workspace health and set up health status alerts:
+ 
+1. Select **Resource health** from the Log Analytics workspace menu.
+
+    The **Resource health** screen shows:
+
+    - **Health history**: Indicates whether Azure Service Health has detected latency or query execution issues in the specific Log Analytics workspace. To further investigate latency issues related to your workspace, see [Investigate latency](#investigate-log-analytics-workspace-health-issues).  
+    - **Azure service issues**: Displayed when a known issue with an Azure service might affect latency in the Log Analytics workspace. Select the message to view details about the service issue in Azure Service Health.
+   
+    > [!NOTE]
+    > - Service health notifications do not indicate that your Log Analytics workspace is necessarily affected by the know service issue. If your Log Analytics workspace resource health status is **Available**, Azure Service Health did not detect issues in your workspace.
+    > - Resource Health excludes data types for which long ingestion latency is expected. For example, Application Insights data types that calculate the application map data and are known to add latency.
+
+   
+    :::image type="content" source="media/data-ingestion-time/log-analytics-workspace-latency.png" lightbox="media/data-ingestion-time/log-analytics-workspace-latency.png" alt-text="Screenshot that shows the Resource health screen for a Log Analytics workspace.":::  
+
+    This table describes the possible resource health status values for a Log Analytics workspace:
+
+    | Resource health status | Description |
+    |-|-|
+    |Available| [Average latency](../logs/data-ingestion-time.md#average-latency) and no query execution issues detected.|
+    |Unavailable|Higher than average latency detected.|    
+    |Degraded|Query failures detected.|
+    |Unknown|Currently unable to determine Log Analytics workspace health because you haven't run queries or ingested data to this workspace recently.|
+    
+1. To set up health status alerts, you can either [enable recommended out-of-the-box alert](../alerts/alerts-overview.md#recommended-alert-rules) rules, or manually create new alert rules.
+    - To create a new alert rule:
+       1. Select **Add resource health alert**.
+        
+            The **Create alert rule** wizard opens, with the **Scope** and **Condition** panes prepopulated. By default, the rule triggers alerts all status changes in all Log Analytics workspaces in the subscription. If necessary, you can edit and modify the scope and condition at this stage. 
+    
+            :::image type="content" source="media/data-ingestion-time/log-analytics-workspace-latency-alert-rule.png" lightbox="media/data-ingestion-time/log-analytics-workspace-latency-alert-rule.png" alt-text="Screenshot that shows the Create alert rule wizard for Log Analytics workspace latency issues.":::
+
+       1. Follow the rest of the steps in [Create a new alert rule in the Azure portal](../alerts/alerts-create-new-alert-rule.md#create-or-edit-an-alert-rule-in-the-azure-portal). 
+
+## View Log Analytics workspace health metrics
+
+Azure Monitor exposes a set of metrics that provide insight into Log Analytics workspace health. 
+
+To view Log Analytics workspace health metrics:
+
+1. Select **Metrics** from the Log Analytics workspace menu. This opens [Metrics Explorer](../essentials/metrics-charts.md) in context of your Log Analytics workspace.
+1. In the **Metric** field, select one of the Log Analytics workspace health metrics:
+
+   | Metric name | Description |
+   | - | - |
+   | Query count | Total number of user queries in the Log Analytics workspace within the selected time range.<br>This number includes only user-initiated queries, and doesn't include queries initiated by Sentinel rules and alert-related queries. |
+   | Query failure count | Total number of failed user queries in the Log Analytics workspace within the selected time range.<br>This number includes all queries that return 5XX response codes - except 504 *Gateway Timeout* - which indicate an error related to the application gateway or the backend server.|
+   | AvailabilityRate_Query | Percentage of successful user queries in the Log Analytics workspace within the selected time range.<br>This number includes all queries that return 2XX, 4XX, and 504 response codes; in other words, all user queries that don't result in a service error. |
+
+
+## Next steps
+
+Learn more about:
+
+- [Log Analytics Workspace Insights](../logs/log-analytics-workspace-insights-overview.md).
+- [Querying log data in Azure Monitor Logs](../logs/get-started-queries.md).
+

articles/azure-monitor/toc.yml

@@ -1076,6 +1076,7 @@ items:
     - name: Azure Workbook components
       items:
         - name: Data sources
+          href: visualize/workbooks-data-sources.md
         - name: Visualizations
           items:
           - name: Overview