Azure Monitor - Alert Notification via Teams

Copper Contributor

Aug 05, 2021

Hi BrunoGabrielli Thank you so much for your help.

It seems the issue is with the Sample alert payload defined https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-common-schema-definitions. It's "alert context" has different properties than mentioned in "Application Insights". So, when I upload this alert payload in "Use sample payload to generate schema" it does not contain properties of alert context for "Application Insights". For example:

Alert context properties for "Application Insights"

        "alertContext": {
            "SearchQuery": "requests\n| where resultCode == 302",
            "SearchIntervalStartTimeUtc": "2021-08-04T15:10:40Z",
            "SearchIntervalEndtimeUtc": "2021-08-04T15:15:40Z",
            "ResultCount": 12,
            "LinkToSearchResults": "https://portal.azure.com/AnalyticsBlade/subscriptions/12345a-1234b-123c-123d-12345678e/?query=search+*+&timeInterval.intervalEnd=2018-03-26T09%3a10%3a40.0000000Z&_timeInterval.intervalDuration=3600&q=Usage",
           "LinkToFilteredSearchResultsUI": "https://portal.azure.com/AnalyticsBlade/subscriptions/12345a-1234b-123c-123d-12345678e/?query=search+*+&timeInterval.intervalEnd=2018-03-26T09%3a10%3a40.0000000Z&_timeInterval.intervalDuration=3600&q=Usage",
           "LinkToSearchResultsAPI": "https://api.applicationinsights.io/v1/apps/0MyAppId0/metrics/requests/count",
           "LinkToFilteredSearchResultsAPI": "https://api.applicationinsights.io/v1/apps/0MyAppId0/metrics/requests/count",
            "SearchIntervalDurationMin": "5",
            "AlertType": "Number of results",
            "IncludeSearchResults": true,
            "SearchIntervalInMinutes": "5",
            "Threshold": 10.0,
            "Operator": "Greater Than",
            "ApplicationId": "64c9c958-a3c6-44a1-9505-47ed33f730b0",
            "IncludedSearchResults": "False"
        }

Alert context properties for "Platform":

    "alertContext": {
      "properties": null,
      "conditionType": "SingleResourceMultipleMetricCriteria",
      "condition": {
        "windowSize": "PT5M",
        "allOf": [
          {
            "metricName": "Percentage CPU",
            "metricNamespace": "Microsoft.Compute/virtualMachines",
            "operator": "GreaterThan",
            "threshold": "25",
            "timeAggregation": "Average",
            "dimensions": [
              {
                "name": "ResourceId",
                "value": "3efad9dc-3d50-4eac-9c87-8b3fd6f97e4e"
              }
            ],
            "metricValue": 7.727
          }
        ]
      }
    }

Difference can be find out in "operator" property in both alert contexts.

Teams connector:

Teams alert:

It didn't add the "Operator" details in "Platform" alert because alert context in sample payload was from "Application Insights"

Here, it added the value because monitoring service was "Application Insights".

So, I'm not getting idea if we have any alert schema which works with all type of alerts' "essentials" and "alertContext".

When I upload alert schema defined https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-common-schema-integrations#create-a-logic-app-leveraging-the-common-alert-schema it does not get some properties in dynamic content section.

Blog Post

Azure Monitor - Alert Notification via Teams