Hi,
I am working on log query to create Azure monitor alert for Azure VPN gateway failed/connected *network connections*.
However below is the query and output
query
// S2S tunnel connet/disconnect events
// S2S tunnel connet/disconnect events during the last 24 hours.
AzureDiagnostics
| where TimeGenerated > ago(1h)
| where Category == "TunnelDiagnosticLog" and (status_s == "Connected" or status_s == "Disconnected")
| project TimeGenerated, Resource , status_s, remoteIP_s, stateChangeReason_s
I need individual network failed/connected alert instead of combined network connections in single alert.
