locked
Microsoft Azure MP - Insights Alert Rule does not show status RRS feed

  • Question

  • I have imported the Microsoft Azure MP and trying to make the status of Monitoring Alerts defined in Azure appear in SCOM (2012 R2).

    I followed the guide, configured with SPN, and have chosen to monitor the service type "alertrules (microsoft.insights)".
    My alert rules do show up, but appear always to be healthy - Even when one alert rule shows warning in Azure and another one has been disabled.

    The guide says: availability monitoring can be applied to: Insights Alert Rule Incident Monitor
    So shouldn't I be able to get the states of these alert rules into SCOM?

    I see an "Insights Incident Monitor", it is enabled by default and should run every 30 seconds. But nothing happens.
    I see no related events in neither "Operations Manager" or "Applications" event log.
    SPN have Owner permission on the sucscription.

    If it should be able to show the current state, how do I debug this?


    • Edited by Jan Nielsen Wednesday, June 21, 2017 4:21 PM Added detail
    Wednesday, June 21, 2017 4:13 PM

All replies

  • Hi Sir,

    >>My alert rules do show up, but appear always to be healthy - Even when one alert rule shows warning in Azure and another one has been disabled.

     

    Is it possible to generate an "critical" alert in azure then check the state of monitor "Insight Incident Monitor" ?

    Such as VM alert rule :

    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/insights-alerts-portal

     

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, June 22, 2017 10:39 AM
  • It seems as if an Azure Alert rule has one threashold only and no way of saying if it should be warning or critical when it is triggered.

    Do you mean I can make it critical in Azure?

    Thursday, June 22, 2017 11:42 AM
  • Hi Sir,

    Because I found this article:

    https://docs.microsoft.com/en-us/azure/templates/microsoft.insights/alertrules

    It mentioned the class "microsoft.insights/alertrules" .

    So , I suggested you try to create an alert rule for VM performance :

    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/insights-alerts-portal

    But , that article mention "Insights Alert Rule Incident Monitor" .

    And , it seems that there is no option to generate "Incident" monitor in this article .

     

    In addition , I also found the article below to generate alert for resources :

    https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-activity-log-alerts

    Have you checked if it can generate Incident monitor ?

     

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    • Edited by Elton_Ji Friday, June 23, 2017 6:16 AM
    Friday, June 23, 2017 5:45 AM
  • From the rest API description I get this: "When an alert rule fires because the threshold is crossed in the up or down direction, an incident is created"

    So it would make sense if the MP discovers the alert rule, but looks for active related alert rule incidents to figure out if the alert is fired. The alert rule itself does not seem to indicate a status whether it is fired or not.

    However the MP documentation does not mention a way to log or debug what is going on. So I rellay cannot see what it is trying to do in that "Insights Incident Monitor".

    Tuesday, June 27, 2017 7:19 AM