Forum Discussion

Byron Boudreaux's avatar
Byron Boudreaux
Copper Contributor
May 30, 2019

Create an Alert from Azure Activity results

I would like to create an Alert that fires when someone requests "Just in time VM access". I can use the query below to surface these events in Logs but not sure how to turn that into and Alert. I have searched though the Alert signals and am unable to find one that maps to this:

 

AzureActivity
| where OperationName == "Initiate JIT Network Access Policy"
| where ActivityStatus == "Started"

Resources