Forum Discussion
LogAnalytics Workspaces - Suppression of alarms from specific Resources
loadedlouie27 the best was is if you use 'Aggregated on', in a metric measure log alert rule, on '_ResourceId'. Then use Action Rules to suppress based on the alert content, setting the relevant resource group from the VM ARM resource ID.
Example of VM resource ID:
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachines/{vmName}
Action rules context filter:
Microsoftloadedlouie27 the best was is if you use 'Aggregated on', in a metric measure log alert rule, on '_ResourceId'. Then use Action Rules to suppress based on the alert content, setting the relevant resource group from the VM ARM resource ID.
Example of VM resource ID:
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachines/{vmName}
Action rules context filter:
yalavi First of all thanks for your reply...
I will try that approach. and provide feedback in the next couple of days.