Azure Monitor not alerting on DNZ Zone Changes

%3CLINGO-SUB%20id%3D%22lingo-sub-568635%22%20slang%3D%22en-US%22%3EAzure%20Monitor%20not%20alerting%20on%20DNZ%20Zone%20Changes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-568635%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20trying%20to%20setup%20DNS%20Zone%20alerting%2C%20so%20any%20generated%20DNS%20Zone%20Activity%20Log%20event%20sends%20out%20an%20email.%20I%20can%20get%20a%20similar%20alerts%20to%20work%20when%20using%20'Metric'%20as%20the%20signal%20type%20within%20Condition%20(an%20alert%20is%20sent%20once%20dns%20records%20exceed%20a%20certain%20value)%2C%20but%20unable%20to%20get%20DNS%20Zone%20changes%20to%20work%20when%20using%20Activity%20Log%20as%20the%20signal%20type.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20is%20the%20Condition%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%22Whenever%20the%20Administrative%20Activity%20Log%20%22All%20Administrative%20operations%22%20has%20%22any%22%20level%2C%20with%20%22any%22%20status%20and%20event%20is%20initiated%20by%20%22any%22%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAm%20I%20missing%20something%20obvious%20here%20or%20approaching%20this%20from%20a%20wrong%20angle%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Echeers!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-568635%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMonitoring%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Contributor

Hi,

 

I am trying to setup DNS Zone alerting, so any generated DNS Zone Activity Log event sends out an email. I can get a similar alerts to work when using 'Metric' as the signal type within Condition (an alert is sent once dns records exceed a certain value), but unable to get DNS Zone changes to work when using Activity Log as the signal type.

 

Here is the Condition:

 

"Whenever the Administrative Activity Log "All Administrative operations" has "any" level, with "any" status and event is initiated by "any""

 

Am I missing something obvious here or approaching this from a wrong angle?

 

cheers!

0 Replies