Forum Discussion

Menaka955's avatar
Menaka955
Copper Contributor
Aug 30, 2021

Maintenance machine should not have HeartBeat alert.

Hi All,

 

I am working on query where it should show the Heart Beat alert for availability  VM and skip the maintenance VM.

 

Is it possible to have Tags of the VM updated with Maintenance should not have Alert.

 

Heartbeat

| where Computer contains "VM"

| summarize LastHeartbeat=max(TimeGenerated) by Computer

| where LastHeartbeat < ago(1m)

 

Thankyou!

Regards

Menaka

Resources