Forum Discussion
cxmelga
Feb 18, 2022Copper Contributor
Can I some how add the 'RenderedDescription' content from Log Analytics to Email Body of Alert
Hello My Azure Monitor is working and I receive the Alert Email OK. This is triggered from a Log Analytics query for a Windows Event log entry However the body of the email alert contains the ...
cxmelga
Feb 22, 2022Copper Contributor
Hi All
Can someone please help me with the above 🙂
To clarify, what I want to achieve seems simple on the surface, but it does not appear to be available with Azure Monitor out of the box without via via a Logic App (which seems odd), So perhaps I am missing something
What I want to do is include the text from the RenderedDescription field (as seen in Log Analytics when querying an Event from the Windows Event Log taken from a standard Windows computer)
in the email body of an Azure Monitor Alert. So then the email arrives it shows the contents/text/message of the Windows Event Log entry (e.g. the one which was alerted on).
My Alert is working OK, in that it fires and I get an email all good. However none of the information/fields in the email alert show the text from the actual Windows Event Log message (aka RenderedDescription from log analytics). The Azure Monitor logic fires on the KQL query (which includes RenderedDescription) but it is not surfaced in the actual email alert body.
Please advise if there is a simply way to include the RenderedDescription text in the email alert body when using Azure Monitor for alerting.
Thanks All
Charlie
Can someone please help me with the above 🙂
To clarify, what I want to achieve seems simple on the surface, but it does not appear to be available with Azure Monitor out of the box without via via a Logic App (which seems odd), So perhaps I am missing something
What I want to do is include the text from the RenderedDescription field (as seen in Log Analytics when querying an Event from the Windows Event Log taken from a standard Windows computer)
in the email body of an Azure Monitor Alert. So then the email arrives it shows the contents/text/message of the Windows Event Log entry (e.g. the one which was alerted on).
My Alert is working OK, in that it fires and I get an email all good. However none of the information/fields in the email alert show the text from the actual Windows Event Log message (aka RenderedDescription from log analytics). The Azure Monitor logic fires on the KQL query (which includes RenderedDescription) but it is not surfaced in the actual email alert body.
Please advise if there is a simply way to include the RenderedDescription text in the email alert body when using Azure Monitor for alerting.
Thanks All
Charlie