Home

Alert suppression

%3CLINGO-SUB%20id%3D%22lingo-sub-252411%22%20slang%3D%22en-US%22%3EAlert%20suppression%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-252411%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20few%20servers%20in%20a%20specific%20role%20and%20each%20server%20create%20an%20event%20in%20application%20log%20when%20certain%20error%20occurs.%20I%20want%20to%20create%20an%20alert%20when%20that%20event%20get%20created%20and%20suppress%20it%20for%20that%20server%20for%20next%203%20day.%26nbsp%3B%20if%20i%20create%20a%20query%20like%20below%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EEvent%20%7C%20where%20Source%20%3D%3D%20%22Monitoring%22%20%7C%20where%20EventID%26nbsp%3B%20%3D%3D%26nbsp%3B8888%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIt%20will%20create%20the%20alert%20for%20each%20server%20but%20if%20i%20also%20configure%20suppress%20alert%2C%20it%20will%20suppress%20the%20alert%20for%20all%20servers%20for%20next%202%20days%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAny%20help%20will%20be%20highly%20appreciated.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-252411%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EQuery%20Language%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Mayank Bansal
Microsoft

I have few servers in a specific role and each server create an event in application log when certain error occurs. I want to create an alert when that event get created and suppress it for that server for next 3 day.  if i create a query like below

 

Event | where Source == "Monitoring" | where EventID  == 8888

 

It will create the alert for each server but if i also configure suppress alert, it will suppress the alert for all servers for next 2 days

 

Any help will be highly appreciated.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies