You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/alerts/alerts-action-rules.md
+13-6Lines changed: 13 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
title: Action rules for Azure Monitor alerts
3
3
description: Understanding what action rules in Azure Monitor are and how to configure and manage them.
4
4
ms.topic: conceptual
5
-
ms.date: 03/15/2021
5
+
ms.date: 04/08/2021
6
6
7
7
---
8
8
@@ -63,7 +63,7 @@ The available filters are:
63
63
64
64
***Severity**
65
65
This rule will apply only to alerts with the selected severities.
66
-
For example, **severity = Sev1** means that the rule will apply only to alerts with Sev1 severity.
66
+
For example, **severity = "Sev1"** means that the rule will apply only to alerts with Sev1 severity.
67
67
***Monitor service**
68
68
This rule will apply only to alerts coming from the selected monitoring services.
69
69
For example, **monitor service = “Azure Backup”** means that the rule will apply only to backup alerts (coming from Azure Backup).
@@ -75,15 +75,22 @@ This rule will apply only to alerts coming from a specific alert rule. The value
75
75
For example, **alert rule ID = "/subscriptions/SubId1/resourceGroups/RG1/providers/microsoft.insights/metricalerts/API-Latency"** means this rule will apply only to alerts coming from "API-Latency" metric alert rule.
76
76
_NOTE - you can get the proper alert rule ID by listing your alert rules from the CLI, or by opening a specific alert rule in the portal, clicking "Properties", and copying the "Resource ID" value._
77
77
***Monitor condition**
78
-
This rule will apply only to alert events with the specified monitor condition - either **Fired** or **Resolved**.
78
+
This rule will apply only to alert events with the specified monitor condition - either **"Fired"** or **"Resolved"**.
79
79
***Description**
80
80
This rule will apply only to alerts that contains a specific string in the alert description field. That field contains the alert rule description.
81
-
For example, **description contains 'prod'** means that the rule will only match alerts that contain the string "prod" in their description.
81
+
For example, **description contains "prod"** means that the rule will only match alerts that contain the string "prod" in their description.
82
82
***Alert context (payload)**
83
83
This rule will apply only to alerts that contain any of one or more specific values in the alert context fields.
84
-
For example, **alert context (payload) contains 'Computer-01'** means that the rule will only apply to alerts whose payload contain the string "Computer-01".
84
+
For example, **alert context (payload) contains "Computer-01"** means that the rule will only apply to alerts whose payload contain the string "Computer-01".
85
85
86
-
If you set multiple filters in a rule, all of them apply. For example, if you set **resource type' = Virtual Machines** and **severity' = Sev0**, then the rule will apply only for Sev0 alerts on virtual machines.
86
+
> [!NOTE]
87
+
> Each filter may include up to five values.
88
+
> For example, a filter on monitor service may include up to five monitor service names.
89
+
90
+
91
+
92
+
93
+
If you set multiple filters in a rule, all of them apply. For example, if you set **resource type = "Virtual Machines"** and **severity = "Sev0"**, then the rule will apply only for Sev0 alerts on virtual machines.
0 commit comments