Home » Azure » Visualize alerts on Azure dashboard [updated]

Contoso.se

Welcome to contoso.se! My name is Anders Bengtsson and this is my blog about Azure infrastructure and system management. I am a senior engineer in the FastTrack for Azure team, part of Azure Engineering, at Microsoft.  Contoso.se has two main purposes, first as a platform to share information with the community and the second as a notebook for myself.

Everything you read here is my own personal opinion and any code is provided "AS-IS" with no warranties.

Anders Bengtsson

MVP
MVP awarded 2007,2008,2009,2010

My Books
Service Manager Unleashed
Service Manager Unleashed
Orchestrator Unleashed
Orchestrator 2012 Unleashed
OMS
Inside the Microsoft Operations Management Suite

Visualize alerts on Azure dashboard [updated]

A common ask is how to visualize alerts from Azure Monitor on an Azure dashboard. Publishing data, including alerts, from Azure Monitor, can be accomplished with a workbook.

With Azure Monitor workbooks, we can create interactive reports based on collected data. Read more about Workbooks at Microsoft Docs.

In this example, we visualize new active alerts on an Azure Dashboard. We start with an empty workbook and add a query tile.

Configure the query, note that we use Alerts as data source and no summary of the result. We have also configured the query to show only New Fired alerts.

Use Column Settings to hide columns that should not be displayed.

Once we are happy with the look of the result, we can click PIN, and pin the panel to a dashboard. When in Edit mode of a tile, we can pin that specific tile. We can also use pin in the top toolbar to pin all parts of a workbook to a dashboard.

UPDATE

The suggested way to query for Azure Alert information is by using the * Azure Resource Graph data source, by querying the AlertsManagementResources table. See Azure Resource Graph table reference Azure Docs, or the Alerts template for examples. The Alerts data source will remain available for a period of time while authors transition to using ARG. Use of this data source in templates is discouraged.

See more at Microsoft Docs

Based on this new recommendation we should re-configure our workbook to use Azure Resource Graph as data source.

The query also needs to be a bit updated, as the image below. It is still the Kusto language, but the syntax is a bit different. To learn more about writing queries in Azure Resource Graph, see Microsoft Docs.

Columns can be renamed by using the column settings feature, see images below. Under column settings, you can also re-format date and configure thresholds on the severity, for example, a red warning sign for severity 0 alerts.


6 Comments

  1. Hi, thanks for reading my blog. You can use Azure Monitor alert to trigger e-mail notification or for example a Logic App. Connect AzureAD to Log Analytics and then use a custom query.

  2. Please make sure the dashboard is a shared dashboard, and that you have full access to the dashboard. Else make sure the dashboard you want to pin to is the active dashboard.

  3. Hi, how can I choose which dashboard this workbook is pinned to? When I tried it always goes to the same old dashboard not the new one I’m creating.

  4. Hi Anders,

    It is very useful article. Can you please explain is it possible to use workbooks with trigger effect to send an email upon the alert. e.g. I would like to receive an email notification when user in Azure AD is inactive for 30 days, or when Conditional policy blocks sign in…Thanks!

Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.