You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/alerts/alerts-create-new-alert-rule.md
+7-8Lines changed: 7 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -249,16 +249,15 @@ Alerts triggered by these alert rules contain a payload that uses the [common al
249
249
250
250
1. On the **Actions** tab, select or create the required [action groups](./action-groups.md).
251
251
252
-
1. (Optional) In the <a name="custom-props">**Custom properties**</a> section, if you've configured action groups for this alert rule, you can add custom properties in key:value pairs to the alert notification payload to add more information to it. Add the property **Name** and **Value** for the custom property you want included in the payload.
252
+
1. <a name="custom-props"></a>(Optional) In the **Custom properties** section, if you've configured action groups for this alert rule, you can add your own properties to include in the alert notification payload. You can use these properties in the actions called by the action group, such as webhook, Azure function or logic app actions.
253
253
254
-
You can also use custom properties to extract and manipulate data from alert payloads that use the [common schema](alerts-common-schema.md). You can use those values in the action group webhook or logic app.
255
-
256
-
> [!NOTE]
257
-
> In this phase the custom properties are not part of the e-mail template
254
+
The custom properties are specified as key:value pairs, using either static text, a dynamic value extracted from the alert payload, or a combination of both.
255
+
256
+
The format for extracting a dynamic value from the alert payload is: `${<path to schema field>}`. For example: ${data.essentials.monitorCondition}.
258
257
259
-
The format for extracting values from the common schema, use a "$", and then the path of the [Common alert schema](alerts-common-schema.md) field inside curly brackets. For example: `${data.essentials.monitorCondition}`.
258
+
Use the [common alert schema](alerts-common-schema.md) format to specify the field in the payload, whether or not the action groups configured for the alert rule use the common schema.
260
259
261
-
In the following examples, values in the **custom properties** are used to utilize data from the payload:
260
+
In the following examples, values in the **custom properties** are used to utilize data from a payload that uses the common alert schema:
262
261
263
262
**Example 1**
264
263
@@ -318,7 +317,7 @@ Alerts triggered by these alert rules contain a payload that uses the [common al
318
317
1. Select the **Severity**.
319
318
1. Enter values for the **Alert rule name** and the **Alert rule description**.
320
319
1. Select the **Region**.
321
-
1. In the <a name="managed-id">**Identity**</a> section, select which identity is used by the log alert rule to send the log query. This identity is used for authentication when the alert rule executes the log query.
320
+
1. <a name="managed-id"></a>In the **Identity** section, select which identity is used by the log alert rule to send the log query. This identity is used for authentication when the alert rule executes the log query.
322
321
323
322
Keep these things in mind when selecting an identity:
324
323
- A managed identity is required if you're sending a query to Azure Data Explorer.
0 commit comments