Blog Post

Azure Observability Blog
2 MIN READ

Announcing the Launch of Customizable Email Subjects for Log Search Alerts V2 in Azure Monitor

NogaLaviMendes's avatar
May 19, 2025

We are thrilled to announce the launch of a new feature in Azure Monitor: Customizable Email Subjects for Log Search Alerts V2, available during May.

What it is

Customizable Email Subjects for Log Search Alerts V2 is a new feature that enables customers to personalize the subject lines of alert emails, making it easier to quickly identify and respond to alerts with more relevant and specific information.

How it works

This feature allows you to override email subjects with dynamic values by concatenating information from the common schema and custom text. For example, you can customize email subjects to include specific details such as the name of the virtual machine (VM) or patching details, allowing for quick identification without opening the email.

Getting Started

To get started with Customizable Email Subjects for Log Search Alerts V2, you can use the following methods:

  1. Using ARM Template: Create an alert rule with action properties using an ARM template. This option will be available during May.

In order to create an alert rule with a customize email subject you should use ARM template with the latest API version (2021-08-01): Resource Manager template samples for log search alerts - Azure Monitor | Microsoft Learn

And add the action properties parameter with the value of the subject (including static and dynamic values), for example:

{
  "actionProperties": {
    "Email.Subject": "This is a custom email subject"
  }
}

At the end of the blog post you can find an example attached to an ARM template for your use.

  1. Using UI: Create an alert rule with action properties using the UI. This option will be available during June.

How to use Dynamic values?

To customize the email subject, you should use the action properties. The action properties are specified as key/value pairs by using static text, a dynamic value extracted from the alert payload, or a combination of both.

The format for extracting a dynamic value from the alert payload is: ${<path to schema field>}. For example: ${data.essentials.monitorCondition}.

Use the format of the common alert schema to specify the field in the payload, whether or not the action groups configured for the alert rule use the common schema.

Looking Forward

We are confident that this feature will significantly enhance your monitoring experience. By providing personalized alert emails, you can quickly identify and respond to issues with more relevant and specific information.

Your Feedback Matters

We look forward to your feedback, for questions or feedback, feel free to reach out to nolavime@microsoft.com or use the Give Feedback form directly in the Azure Monitor portal. 

 

Updated May 08, 2025
Version 1.0
No CommentsBe the first to comment