Home

Alert suppression

%3CLINGO-SUB%20id%3D%22lingo-sub-252411%22%20slang%3D%22en-US%22%3EAlert%20suppression%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-252411%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20few%20servers%20in%20a%20specific%20role%20and%20each%20server%20create%20an%20event%20in%20application%20log%20when%20certain%20error%20occurs.%20I%20want%20to%20create%20an%20alert%20when%20that%20event%20get%20created%20and%20suppress%20it%20for%20that%20server%20for%20next%203%20day.%26nbsp%3B%20if%20i%20create%20a%20query%20like%20below%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EEvent%20%7C%20where%20Source%20%3D%3D%20%22Monitoring%22%20%7C%20where%20EventID%26nbsp%3B%20%3D%3D%26nbsp%3B8888%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIt%20will%20create%20the%20alert%20for%20each%20server%20but%20if%20i%20also%20configure%20suppress%20alert%2C%20it%20will%20suppress%20the%20alert%20for%20all%20servers%20for%20next%202%20days%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAny%20help%20will%20be%20highly%20appreciated.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-252411%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EQuery%20Language%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Mayank Bansal
Microsoft

I have few servers in a specific role and each server create an event in application log when certain error occurs. I want to create an alert when that event get created and suppress it for that server for next 3 day.  if i create a query like below

 

Event | where Source == "Monitoring" | where EventID  == 8888

 

It will create the alert for each server but if i also configure suppress alert, it will suppress the alert for all servers for next 2 days

 

Any help will be highly appreciated.

Related Conversations
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
7 Replies