SOLVED

Suppress alerts not working

%3CLINGO-SUB%20id%3D%22lingo-sub-1724513%22%20slang%3D%22en-US%22%3ESuppress%20alerts%20not%20working%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1724513%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3EHave%20created%20a%20log%20based%20alert%20rule%20that%20checks%20if%20diskspace%20is%20too%20low.%3C%2FP%3E%3CP%3EBut%20since%20I%20don't%20want%20more%20than%20one%20alert%20I'v%20set%20supress%20alerts%20to%20180%20minutes%20to%20test.%3C%2FP%3E%3CP%3EBut%20I%20get%20alert%20every%20time%20the%20rule%20runs%2C%20(10%20min)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22PatrikHansson_0-1601387638834.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F222811iFF2C87F559F59A40%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22PatrikHansson_0-1601387638834.png%22%20alt%3D%22PatrikHansson_0-1601387638834.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22PatrikHansson_1-1601387699214.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F222812i7EB4A8DB50EBFC23%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22PatrikHansson_1-1601387699214.png%22%20alt%3D%22PatrikHansson_1-1601387699214.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1724513%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ELog%20Analytics%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1724663%22%20slang%3D%22en-US%22%3ERe%3A%20Suppress%20alerts%20not%20working%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1724663%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F577472%22%20target%3D%22_blank%22%3E%40PatrikHansson%3C%2FA%3E%26nbsp%3BI%20believe%20the%20suppression%20rule%20is%20for%20the%20action%20group%2C%20and%20not%20so%20much%20for%20the%20alert%20panel.%20I%20have%20it%20on%20an%20action%20group%2C%20and%20only%20get%20spammed%20once%20an%20hour%20(with%2060m%20suppression)%2C%20but%20the%20alert%20panel%20shows%20all%20the%20events.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1724674%22%20slang%3D%22en-US%22%3ERe%3A%20Suppress%20alerts%20not%20working%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1724674%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F671042%22%20target%3D%22_blank%22%3E%40-Akos-%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAh%2C%20of%20course.%20Missed%20it%20in%20the%20docs%20here%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fplatform%2Falerts-log%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fplatform%2Falerts-log%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%22Choose%20if%20you%20want%20to%20suppress%20rule%20actions%20for%20a%20time%20after%20an%20alert%20is%20fired%2C%20use%20the%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fplatform%2Falerts-unified-log%23state-and-resolving-alerts%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%3CSTRONG%3ESuppress%20Alerts%3C%2FSTRONG%3E%3C%2FA%3E%3CSPAN%3E%26nbsp%3Boption.%20%3CSTRONG%3EThe%20rule%20will%20still%20run%20and%20create%20alerts%20but%20actions%20won't%20be%20triggered%20to%20prevent%20noise.%3C%2FSTRONG%3E%20Mute%20actions%20value%20must%20be%20greater%20than%20the%20frequency%20of%20alert%20to%20be%20effective.%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EBut%20to%20be%20fair%20none%20of%20the%20docs%20pages%20I%20looked%20at%20looks%20like%20the%20Alert%20Rule%20page%20looks%20nowadays.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi

Have created a log based alert rule that checks if diskspace is too low.

But since I don't want more than one alert I'v set supress alerts to 180 minutes to test.

But I get alert every time the rule runs, (10 min)

 

PatrikHansson_0-1601387638834.png

 

PatrikHansson_1-1601387699214.png

 

 

2 Replies
best response confirmed by PatrikHansson (Contributor)
Solution

@PatrikHansson I believe the suppression rule is for the action group, and not so much for the alert panel. I have it on an action group, and only get spammed once an hour (with 60m suppression), but the alert panel shows all the events.

@-Akos- 

Ah, of course. Missed it in the docs here https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-log

"Choose if you want to suppress rule actions for a time after an alert is fired, use the Suppress Alerts option. The rule will still run and create alerts but actions won't be triggered to prevent noise. Mute actions value must be greater than the frequency of alert to be effective."

 

But to be fair none of the docs pages I looked at looks like the Alert Rule page looks nowadays.