Heartbeat Missed but No Alert triggered

%3CLINGO-SUB%20id%3D%22lingo-sub-880451%22%20slang%3D%22en-US%22%3EHeartbeat%20Missed%20but%20No%20Alert%20triggered%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-880451%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Experts%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20big%20concern%20after%20when%20a%20VM%20get%20rebooted%20and%20I%20haven't%20found%20any%20alert%20through%20ALA%20alert.%3C%2FP%3E%3CP%3ELet%20me%20shed%20some%20background%20behind%20the%20scenes.%3C%2FP%3E%3CP%3EGenerally%20we%20have%2060%20heartbeat%20for%20every%20VMs%20but%20I%20have%20received%2059%20heartbeat%20for%20one%20VM%20and%20checked%20that%20was%20rebooted%20but%20I%20have%20not%20received%20any%20alert.%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20a%20look%20on%20below%20data%2C%20where%20we%20could%20see%20in%20first%20column%20everything%20is%20fine%20but%20column%202%20and%203%20has%20one%20missing%20heartbeat.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3ETimeGenerated%3C%2FTD%3E%3CTD%3ETimeGenerated%3C%2FTD%3E%3CTD%3ETimeGenerated%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A00%3A39%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A00%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A00%3A01%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A01%3A39%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A01%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A01%3A01%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A02%3A39%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A02%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A02%3A01%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A03%3A39%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A03%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A03%3A01%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A04%3A39%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A04%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A04%3A06%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A05%3A39%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A05%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A05%3A06%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A06%3A39%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A06%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A06%3A06%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A07%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A07%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A07%3A06%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A08%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A08%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A08%3A11%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A09%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A09%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A09%3A11%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A10%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A10%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A10%3A11%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A11%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A11%3A06%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A11%3A11%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A12%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A12%3A11%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A12%3A16%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A13%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A13%3A11%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A13%3A16%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A14%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A14%3A11%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A14%3A16%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A15%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A15%3A11%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A15%3A16%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A16%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A16%3A16%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A16%3A21%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A17%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A17%3A16%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A17%3A21%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A18%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A18%3A16%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A18%3A21%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A19%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A19%3A16%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A19%3A21%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A20%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A20%3A21%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A20%3A26%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A21%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A21%3A21%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A21%3A26%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A22%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A22%3A21%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A22%3A26%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A23%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A23%3A21%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A23%3A26%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A24%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A24%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A24%3A31%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A25%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A25%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A25%3A31%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A26%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A26%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A26%3A31%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A27%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A27%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A27%3A31%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A28%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A28%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A28%3A36%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A29%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A29%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A29%3A36%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A30%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A30%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A30%3A36%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A31%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A31%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A31%3A36%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A32%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A32%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A32%3A41%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A33%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A33%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A33%3A41%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A34%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A34%3A26%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A34%3A41%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A35%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A35%3A31%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A35%3A41%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A36%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A36%3A31%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A36%3A46%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A37%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A37%3A31%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A37%3A46%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A38%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A38%3A31%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A38%3A46%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A39%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A39%3A36%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A39%3A46%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A40%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A40%3A36%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A40%3A51%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A41%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A41%3A36%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A41%3A51%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A42%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A42%3A36%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A42%3A51%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A43%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A43%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A43%3A51%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A44%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A44%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A44%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A45%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A45%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A45%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A46%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A46%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A46%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A47%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A47%3A46%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A47%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A48%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A48%3A46%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A48%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A49%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A49%3A46%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A49%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A50%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A50%3A46%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A50%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A51%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A51%3A51%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A51%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A52%3A40%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A52%3A51%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A52%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A53%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A53%3A51%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A53%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A54%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A54%3A51%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A54%3A56%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A55%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A55%3A56%3C%2FTD%3E%3CTD%3E%3CSTRONG%3EData%20for%2055%20is%20missing%3C%2FSTRONG%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A56%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A56%3A56%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A56%3A01%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A57%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A57%3A56%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A57%3A01%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A58%3A41%3C%2FTD%3E%3CTD%3E2019-09-27T16%3A58%3A56%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A58%3A01%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E2019-09-27T10%3A59%3A41%3C%2FTD%3E%3CTD%3E%3CSTRONG%3EData%20for%2059%20is%20missing%3C%2FSTRONG%3E%3C%2FTD%3E%3CTD%3E2019-09-27T17%3A59%3A01%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUsed%20query%20to%20get%20this%20data%3A%20-%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CDIV%3E%3CSPAN%3EHeartbeat%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%20%3C%2FSPAN%3E%3CSPAN%3Ewhere%3C%2FSPAN%3E%3CSPAN%3E%20TimeGenerated%20%26gt%3B%3D%20ago(48%3C%2FSPAN%3E%3CSPAN%3Eh)%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%20%3C%2FSPAN%3E%3CSPAN%3Ewhere%3C%2FSPAN%3E%3CSPAN%3E%20Computer%20%3C%2FSPAN%3E%3CSPAN%3Econtains%3C%2FSPAN%3E%20%3CSPAN%3E%22server%20name%22%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%20%3C%2FSPAN%3E%3CSPAN%3Edistinct%3C%2FSPAN%3E%3CSPAN%3E%20TimeGenerated%2C%20Computer%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%20%3C%2FSPAN%3E%3CSPAN%3Esort%3C%2FSPAN%3E%20%3CSPAN%3Eby%3C%2FSPAN%3E%3CSPAN%3E%20TimeGenerated%20asc%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EAnd%20I%20am%20using%20below%20query%20and%20samples%20to%20trigger%20on%20heartbeat%2C%20%3CSTRONG%3Eplease%20check%20and%20let%20me%20know%20what%20i%20need%20to%20modify%20to%20have%20an%20alert%20whenever%20any%20heartbeat%20gets%20missed%3C%2FSTRONG%3E.%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSTRONG%3EQuery%20Using%20in%20Alert%3A%20-%3C%2FSTRONG%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EHeartbeat%3CBR%20%2F%3E%7C%20summarize%20LastCall%20%3D%20max(TimeGenerated)%20by%20Computer%3CBR%20%2F%3E%7C%20extend%20AggregatedValue%20%3D%20LastCall%3CBR%20%2F%3E%7C%20where%20LastCall%20%26lt%3B%20ago(5m)%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EAlert%20Logic%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3ENumber%20of%20Result%20Greater%20Then%200%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EEvaluated%20based%20on%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EPeriod%201440%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EFrequency%3CSPAN%3E%26nbsp%3B1440%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThanks%20for%20the%20help%20%3A)%3C%2Fimg%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-880451%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EQuery%20Language%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Contributor

Hi Experts,

 

I have a big concern after when a VM get rebooted and I haven't found any alert through ALA alert.

Let me shed some background behind the scenes.

Generally we have 60 heartbeat for every VMs but I have received 59 heartbeat for one VM and checked that was rebooted but I have not received any alert. 

Have a look on below data, where we could see in first column everything is fine but column 2 and 3 has one missing heartbeat.

 

TimeGeneratedTimeGeneratedTimeGenerated
2019-09-27T10:00:392019-09-27T16:00:062019-09-27T17:00:01
2019-09-27T10:01:392019-09-27T16:01:062019-09-27T17:01:01
2019-09-27T10:02:392019-09-27T16:02:062019-09-27T17:02:01
2019-09-27T10:03:392019-09-27T16:03:062019-09-27T17:03:01
2019-09-27T10:04:392019-09-27T16:04:062019-09-27T17:04:06
2019-09-27T10:05:392019-09-27T16:05:062019-09-27T17:05:06
2019-09-27T10:06:392019-09-27T16:06:062019-09-27T17:06:06
2019-09-27T10:07:402019-09-27T16:07:062019-09-27T17:07:06
2019-09-27T10:08:402019-09-27T16:08:062019-09-27T17:08:11
2019-09-27T10:09:402019-09-27T16:09:062019-09-27T17:09:11
2019-09-27T10:10:402019-09-27T16:10:062019-09-27T17:10:11
2019-09-27T10:11:402019-09-27T16:11:062019-09-27T17:11:11
2019-09-27T10:12:402019-09-27T16:12:112019-09-27T17:12:16
2019-09-27T10:13:402019-09-27T16:13:112019-09-27T17:13:16
2019-09-27T10:14:402019-09-27T16:14:112019-09-27T17:14:16
2019-09-27T10:15:402019-09-27T16:15:112019-09-27T17:15:16
2019-09-27T10:16:402019-09-27T16:16:162019-09-27T17:16:21
2019-09-27T10:17:402019-09-27T16:17:162019-09-27T17:17:21
2019-09-27T10:18:402019-09-27T16:18:162019-09-27T17:18:21
2019-09-27T10:19:402019-09-27T16:19:162019-09-27T17:19:21
2019-09-27T10:20:402019-09-27T16:20:212019-09-27T17:20:26
2019-09-27T10:21:402019-09-27T16:21:212019-09-27T17:21:26
2019-09-27T10:22:402019-09-27T16:22:212019-09-27T17:22:26
2019-09-27T10:23:402019-09-27T16:23:212019-09-27T17:23:26
2019-09-27T10:24:402019-09-27T16:24:262019-09-27T17:24:31
2019-09-27T10:25:402019-09-27T16:25:262019-09-27T17:25:31
2019-09-27T10:26:402019-09-27T16:26:262019-09-27T17:26:31
2019-09-27T10:27:402019-09-27T16:27:262019-09-27T17:27:31
2019-09-27T10:28:402019-09-27T16:28:262019-09-27T17:28:36
2019-09-27T10:29:402019-09-27T16:29:262019-09-27T17:29:36
2019-09-27T10:30:402019-09-27T16:30:262019-09-27T17:30:36
2019-09-27T10:31:402019-09-27T16:31:262019-09-27T17:31:36
2019-09-27T10:32:402019-09-27T16:32:262019-09-27T17:32:41
2019-09-27T10:33:402019-09-27T16:33:262019-09-27T17:33:41
2019-09-27T10:34:402019-09-27T16:34:262019-09-27T17:34:41
2019-09-27T10:35:402019-09-27T16:35:312019-09-27T17:35:41
2019-09-27T10:36:402019-09-27T16:36:312019-09-27T17:36:46
2019-09-27T10:37:402019-09-27T16:37:312019-09-27T17:37:46
2019-09-27T10:38:402019-09-27T16:38:312019-09-27T17:38:46
2019-09-27T10:39:402019-09-27T16:39:362019-09-27T17:39:46
2019-09-27T10:40:402019-09-27T16:40:362019-09-27T17:40:51
2019-09-27T10:41:402019-09-27T16:41:362019-09-27T17:41:51
2019-09-27T10:42:402019-09-27T16:42:362019-09-27T17:42:51
2019-09-27T10:43:402019-09-27T16:43:412019-09-27T17:43:51
2019-09-27T10:44:402019-09-27T16:44:412019-09-27T17:44:56
2019-09-27T10:45:402019-09-27T16:45:412019-09-27T17:45:56
2019-09-27T10:46:402019-09-27T16:46:412019-09-27T17:46:56
2019-09-27T10:47:402019-09-27T16:47:462019-09-27T17:47:56
2019-09-27T10:48:402019-09-27T16:48:462019-09-27T17:48:56
2019-09-27T10:49:402019-09-27T16:49:462019-09-27T17:49:56
2019-09-27T10:50:402019-09-27T16:50:462019-09-27T17:50:56
2019-09-27T10:51:402019-09-27T16:51:512019-09-27T17:51:56
2019-09-27T10:52:402019-09-27T16:52:512019-09-27T17:52:56
2019-09-27T10:53:412019-09-27T16:53:512019-09-27T17:53:56
2019-09-27T10:54:412019-09-27T16:54:512019-09-27T17:54:56
2019-09-27T10:55:412019-09-27T16:55:56Data for 55 is missing
2019-09-27T10:56:412019-09-27T16:56:562019-09-27T17:56:01
2019-09-27T10:57:412019-09-27T16:57:562019-09-27T17:57:01
2019-09-27T10:58:412019-09-27T16:58:562019-09-27T17:58:01
2019-09-27T10:59:41Data for 59 is missing2019-09-27T17:59:01

 

Used query to get this data: -

 

Heartbeat
| where TimeGenerated >= ago(48h)
| where Computer contains "server name"
| distinct TimeGenerated, Computer
| sort by TimeGenerated asc
 
And I am using below query and samples to trigger on heartbeat, please check and let me know what i need to modify to have an alert whenever any heartbeat gets missed.
 
Query Using in Alert: -
Heartbeat
| summarize LastCall = max(TimeGenerated) by Computer
| extend AggregatedValue = LastCall
| where LastCall < ago(5m)

 

Alert Logic

Number of Result Greater Then 0

 

Evaluated based on

Period 1440

Frequency 1440

 

Thanks for the help :)