You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/automation/automation-azure-vm-alert-integration.md
+14-14Lines changed: 14 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: " Remediate Azure VM Alerts with Automation Runbooks | Microsoft Docs"
3
3
description: This article demonstrates how to integrate Azure Virtual Machine alerts with Azure Automation runbooks and auto-remediate issues
4
4
services: automation
5
5
documentationcenter: ''
6
-
author: mgoedtel
6
+
author: eslesar
7
7
manager: jwhit
8
8
editor: tysonn
9
9
@@ -13,16 +13,16 @@ ms.devlang: na
13
13
ms.topic: article
14
14
ms.tgt_pltfrm: na
15
15
ms.workload: infrastructure-services
16
-
ms.date: 06/14/2016
16
+
ms.date: 09/29/2017
17
17
ms.author: csand;magoedte
18
18
19
19
---
20
20
# Azure Automation scenario - remediate Azure VM alerts
21
21
Azure Automation and Azure Virtual Machines have released a new feature allowing you to configure Virtual Machine (VM) alerts to run Automation runbooks. This new capability allows you to automatically perform standard remediation in response to VM alerts, like restarting or stopping the VM.
22
22
23
-
Previously, during VM alert rule creation you were able to [specify an Automation webhook](https://azure.microsoft.com/blog/using-azure-automation-to-take-actions-on-azure-alerts/) to a runbook in order to run the runbook whenever the alert triggered. However, this required you to do the work of creating the runbook, creating the webhook for the runbook, and then copying and pasting the webhook during alert rule creation. With this new release, the process is much easier because you can directly choose a runbook from a list during alert rule creation, and you can choose an Automation account which will run the runbook or easily create an account.
23
+
Previously, during VM alert rule creation you were able to [specify an Automation webhook](https://azure.microsoft.com/blog/using-azure-automation-to-take-actions-on-azure-alerts/) to a runbook in order to run the runbook whenever the alert triggered. However, this required you to do the work of creating the runbook, creating the webhook for the runbook, and then copying and pasting the webhook during alert rule creation. With this new release, the process is much easier because you can directly choose a runbook from a list during alert rule creation, and you can choose an Automation account which runs the runbook or easily create an account.
24
24
25
-
In this article, we will show you how easy it is to set up an Azure VM alert and configure an Automation runbook to run whenever the alert triggers. Example scenarios include restarting a VM when the memory usage exceeds some threshold due to an application on the VM with a memory leak, or stopping a VM when the CPU user time has been below 1% for past hour and is not in use. We’ll also explain how the automated creation of a service principal in your Automation account simplifies the use of runbooks in Azure alert remediation.
25
+
In this article, we show you how easy it is to set up an Azure VM alert and configure an Automation runbook to run whenever the alert triggers. Example scenarios include restarting a VM when the memory usage exceeds some threshold due to an application on the VM with a memory leak, or stopping a VM when the CPU user time has been below 1% for past hour and is not in use. We’ll also explain how the automated creation of a service principal in your Automation account simplifies the use of runbooks in Azure alert remediation.
26
26
27
27
## Create an alert on a VM
28
28
Perform the following steps to configure an alert to launch a runbook when its threshold has been met.
@@ -33,14 +33,14 @@ Perform the following steps to configure an alert to launch a runbook when its t
33
33
>
34
34
35
35
1. Log in to the Azure portal and click **Virtual Machines**.
36
-
2. Select one of your virtual machines. The virtual machine dashboard blade will appear and the **Settings** blade to its right.
37
-
3.From the **Settings** blade, under the Monitoring section select**Alert rules**.
38
-
4. On the **Alert rules**blade, click **Add alert**.
36
+
2. Select one of your virtual machines.
37
+
3.On the VM screen, in the **Monitoring** section, click**Alert rules**.
38
+
4. On the **Alert rules**pane, click **Add alert**.
39
39
40
-
This opens up the **Add an alert rule**blade, where you can configure the conditions for the alert and choose among one or all of these options: send email to someone, use a webhook to forward the alert to another system, and/or run an Automation runbook in response attempt to remediate the issue.
40
+
This opens up the **Add an alert rule**page, where you can configure the conditions for the alert and choose among one or all of these options: send email to someone, use a webhook to forward the alert to another system, and/or run an Automation runbook in response attempt to remediate the issue.
41
41
42
42
## Configure a runbook
43
-
To configure a runbook to run when the VM alert threshold is met, select **Automation Runbook**. In the **Configure runbook**blade, you can select the runbook to run and the Automation account to run the runbook in.
43
+
To configure a runbook to run when the VM alert threshold is met, select **Automation Runbook**. In the **Configure runbook**pane, you can select the runbook to run and the Automation account to run the runbook in.
44
44
45
45

46
46
@@ -53,7 +53,7 @@ To configure a runbook to run when the VM alert threshold is met, select **Autom
53
53
54
54
After you select one of the three available runbooks, the **Automation account** drop-down list appears and you can select an automation account the runbook will run as. Runbooks need to run in the context of an [Automation account](automation-security-overview.md) that is in your Azure subscription. You can select an Automation account that you already created, or you can have a new Automation account created for you.
55
55
56
-
The runbooks that are provided authenticate to Azure using a service principal. If you choose to run the runbook in one of your existing Automation accounts, we will automatically create the service principal for you. If you choose to create a new Automation account, then we will automatically create the account and the service principal. In both cases, two assets will also be created in the Automation account – a certificate asset named **AzureRunAsCertificate** and a connection asset named **AzureRunAsConnection**. The runbooks will use **AzureRunAsConnection** to authenticate with Azure in order to perform the management action against the VM.
56
+
The runbooks that are provided authenticate to Azure using a service principal. If you choose to run the runbook in one of your existing Automation accounts, we automatically create the service principal for you. If you choose to create a new Automation account, then we automatically create the account and the service principal. In both cases, two assets are also created in the Automation account – a certificate asset named **AzureRunAsCertificate** and a connection asset named **AzureRunAsConnection**. The runbooks use **AzureRunAsConnection** to authenticate with Azure in order to perform the management action against the VM.
57
57
58
58
> [!NOTE]
59
59
> The service principal is created in the subscription scope and is assigned the Contributor role. This role is required in order for the account to have permission to run Automation runbooks to manage Azure VMs. The creation of an Automaton account and/or service principal is a one-time event. Once they are created, you can use that account to run runbooks for other Azure VM alerts.
@@ -64,11 +64,11 @@ When you click **OK** the alert is configured and if you selected the option to
64
64
65
65

66
66
67
-
After the configuration is completed you will see the name of the runbook appear in the **Add an alert rule**blade.
67
+
After the configuration is completed, you see the name of the runbook in the **Add an alert rule**page.
Click **OK** in the **Add an alert rule**blade and the alert rule will be created and activate if the virtual machine is in a running state.
71
+
Click **OK** in the **Add an alert rule**page. The alert rule is created and activate if the virtual machine is in a running state.
72
72
73
73
### Enable or disable a runbook
74
74
If you have a runbook configured for an alert, you can disable it without removing the runbook configuration. This allows you to keep the alert running and perhaps test some of the alert rules and then later re-enable the runbook.
@@ -116,7 +116,7 @@ When the Automation webhook service receives the HTTP POST it extracts the alert
116
116
117
117
### Example runbook
118
118
```
119
-
# This runbook will restart an ARM (V2) VM in response to an Azure VM alert.
119
+
# This runbook restarts an ARM (V2) VM in response to an Azure VM alert.
120
120
121
121
[OutputType("PSAzureOperationResponse")]
122
122
@@ -168,7 +168,7 @@ if ($WebhookData)
168
168
```
169
169
170
170
## Summary
171
-
When you configure an alert on an Azure VM, you now have the ability to easily configure an Automation runbook to automatically perform remediation action when the alert triggers. For this release, you can choose from runbooks to restart, stop, or delete a VM depending on your alert scenario. This is just the beginning of enabling scenarios where you control the actions (notification, troubleshooting, remediation) that will be taken automatically when an alert triggers.
171
+
When you configure an alert on an Azure VM, you now have the ability to easily configure an Automation runbook to automatically perform remediation action when the alert triggers. For this release, you can choose from runbooks to restart, stop, or delete a VM depending on your alert scenario. This is just the beginning of enabling scenarios where you control the actions (notification, troubleshooting, remediation) that are performed automatically when an alert triggers.
172
172
173
173
## Next Steps
174
174
* To get started with Graphical runbooks, see [My first graphical runbook](automation-first-runbook-graphical.md)
Copy file name to clipboardExpand all lines: articles/automation/automation-certificates.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: Certificate assets in Azure Automation | Microsoft Docs
3
3
description: Certificates can be stored securely in Azure Automation so they can be accessed by runbooks or DSC configurations to authenticate against Azure and third-party resources. This article explains the details of certificates and how to work with them in both textual and graphical authoring.
Copy file name to clipboardExpand all lines: articles/automation/automation-config-aws-account.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: Configure Authentication with Amazon Web Services | Microsoft Docs
3
3
description: This article describes how to create and validate an AWS credential for runbooks in Azure Automation managing AWS resources.
4
4
services: automation
5
5
documentationcenter: ''
6
-
author: mgoedtel
6
+
author: eslesar
7
7
manager: jwhit
8
8
editor: tysonn
9
9
keywords: aws authentication, configure aws
@@ -14,26 +14,26 @@ ms.workload: tbd
14
14
ms.tgt_pltfrm: na
15
15
ms.devlang: na
16
16
ms.topic: get-started-article
17
-
ms.date: 04/14/2017
17
+
ms.date: 09/29/2017
18
18
ms.author: magoedte
19
19
20
20
---
21
21
# Authenticate Runbooks with Amazon Web Services
22
22
Automating common tasks with resources in Amazon Web Services (AWS) can be accomplished with Automation runbooks in Azure. You can automate many tasks in AWS using Automation runbooks just like you can with resources in Azure. All that is required are two things:
23
23
24
-
* An AWS subscription and a set of credentials. Specifically your AWS Access Key and Secret Key. For more information, please review the article [Using AWS Credentials](http://docs.aws.amazon.com/powershell/latest/userguide/specifying-your-aws-credentials.html).
25
-
* An Azure subscription and Automation account. For more information on setting up an Azure Automation account, please review the article [Configure Azure Run As Account](automation-sec-configure-azure-runas-account.md).
24
+
* An AWS subscription and a set of credentials. Specifically your AWS Access Key and Secret Key. For more information, review the article [Using AWS Credentials](http://docs.aws.amazon.com/powershell/latest/userguide/specifying-your-aws-credentials.html).
25
+
* An Azure subscription and Automation account. For more information on setting up an Azure Automation account, review [Authentication planning](automation-offering-get-started.md#authentication-planning).
26
26
27
-
To authenticate with AWS, you must specify a set of AWS credentials to authenticate your runbooks running from Azure Automation. If you already have an Automation account created and you want to use that to authenticate with AWS, you can follow the steps in the following section. If you want to dedicated an account for runbooks targetting AWS resources, you should first create a new [Automation account](automation-offering-get-started.md) (skip the option to create a service principal) and then follow the steps below.
27
+
To authenticate with AWS, you must specify a set of AWS credentials to authenticate your runbooks running from Azure Automation. If you already have an Automation account created and you want to use that to authenticate with AWS, you can follow the steps in the following section. If you want to dedicate an account for runbooks targeting AWS resources, you should first create a new [Automation account](automation-offering-get-started.md) (skip the option to create a service principal) and then follow the steps below.
28
28
29
29
## Configure Automation account
30
30
For Azure Automation to communicate with AWS, you first need to retrieve your AWS credentials and store them as assets in Azure Automation. Perform the following steps documented in the AWS document [Managing Access Keys for your AWS Account](http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html) to create an Access Key and copy the **Access Key ID** and **Secret Access Key** (optionally download your key file to store it somewhere safe).
31
31
32
32
After you have created and copied your AWS security keys, you need to create a Credential asset with an Azure Automation account to securely store them and reference them with your runbooks. Follow the steps in the section **To create a new credential** in the [Credential assets in Azure Automation](automation-credentials.md#to-create-a-new-credential-asset-with-the-azure-portal) article and enter the following information:
33
33
34
34
1. In the **Name** box, enter **AWScred** or an appropriate value following your naming standards.
35
-
2. In the **User name** box type your **Access ID** and your **Secret Access Key** in the **Password** and **Confirm password** box.
35
+
2. In the **User name** box, type your **Access ID** and your **Secret Access Key** in the **Password** and **Confirm password** box.
36
36
37
37
## Next steps
38
-
*Reivew the solution article [Automating deployment of a VM in Amazon Web Services](automation-scenario-aws-deployment.md) to learn how to create runbooks to automate tasks in AWS.
38
+
*Review the solution article [Automating deployment of a VM in Amazon Web Services](automation-scenario-aws-deployment.md) to learn how to create runbooks to automate tasks in AWS.
Copy file name to clipboardExpand all lines: articles/automation/automation-connections.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,9 +1,9 @@
1
-
---
1
+
---
2
2
title: Connection assets in Azure Automation | Microsoft Docs
3
3
description: Connection assets in Azure Automation contain the information required to connect to an external service or application from a runbook or DSC configuration. This article explains the details of connections and how to work with them in both textual and graphical authoring.
Copy file name to clipboardExpand all lines: articles/automation/automation-create-aduser-account.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: Create Azure AD User Account | Microsoft Docs
3
3
description: This article describes how to create an Azure AD User account credential for runbooks in Azure Automation to authenticate in Azure and classic Azure.
4
4
services: automation
5
5
documentationcenter: ''
6
-
author: MGoedtel
6
+
author: eslesar
7
7
manager: jwhit
8
8
editor: tysonn
9
9
keywords: azure active directory user, azure service management, azure ad user account
0 commit comments