Mar 21 2022
- last edited on
Apr 08 2022
I'm trying to use the newer feature "Automatically resolve alerts" with a Heartbeat alert, but I am having no luck no matter how I configure the alert.
Heartbeat | where TimeGenerated >= ago(24h) | summarize LastHeartbeat=max(TimeGenerated) by Computer, _ResourceId | where LastHeartbeat < ago(15m)
...and under Alert rule details, I have "Automatically resolve alerts" selected.
My alerts trigger just fine (I've never had a problem with that), but when I bring a VM back online, the alert does not switch to a "Resolved" condition. All the alerts remain in a "Fired" condition.
Am I missing something or does this feature even work?
Thanks in advance!
Mar 28 2022 05:04 AM
Apr 10 2022 06:16 PM