Skip to content

Commit d50372e

Browse files
committed
Learn Editor: Update alerts-create-log-alert-rule.md
1 parent 9778ea5 commit d50372e

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

articles/azure-monitor/alerts/alerts-create-log-alert-rule.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ Alerts triggered by these alert rules contain a payload that uses the [common al
4343
1. On the **Logs** pane, write a query that returns the log events for which you want to create an alert. To use one of the predefined alert rule queries, expand the **Schema and filter** pane on the left of the **Logs** pane. Then select the **Queries** tab, and select one of the queries.
4444

4545
Limitations for log search alert rule queries:
46-
- Log search alert rule queries do not support the 'bag_unpack()', 'pivot()' and 'narrow()' plugins.
46+
- Log search alert rule queries do not support the 'bag_unpack()', 'pivot()' and 'narrow()' plugins.
4747
- The word "AggregatedValue" is a reserved word, it cannot be used in the query on Log search Alerts rules.
4848
- The combined size of all data in the log alert rule properties cannot exceed 64KB.
4949

@@ -122,6 +122,7 @@ Limitations for log search alert rule queries:
122122
|Frequency of evaluation|How often the query is run. Can be set anywhere from one minute to one day (24 hours).|
123123
124124
> [!NOTE]
125+
> It is important to note that the frequency is not a specific time that the alert runs every day, but it is how often the alert rule will run.
125126
> There are some limitations to using a <a name="frequency">one minute</a> alert rule frequency. When you set the alert rule frequency to one minute, an internal manipulation is performed to optimize the query. This manipulation can cause the query to fail if it contains unsupported operations. The following are the most common reasons a query are not supported:
126127
> * The query contains the **search**, **union** * or **take** (limit) operations
127128
> * The query contains the **ingestion_time()** function
@@ -168,8 +169,6 @@ Limitations for log search alert rule queries:
168169
1. Enter values for the **Alert rule name** and the **Alert rule description**.
169170
> [!NOTE]
170171
> Notice that rule that uses **Identity** cannot have the character ";" in the **Alert rule name**
171-
> Customers cannot set a specific time to run the alert at same time everyday, but they can set frequency to run the alert rule.
172-
173172
1. Select the **Region**.
174173
1. <a name="managed-id"></a>In the **Identity** section, select which identity is used by the log search alert rule to send the log query. This identity is used for authentication when the alert rule executes the log query.
175174

0 commit comments

Comments
 (0)