Forum Discussion

FabianChacon12's avatar
FabianChacon12
Copper Contributor
Oct 16, 2023

Create Azure Alert for deleted virtual machines with the IP address for each VM as output

Hello everyone, I just want to ask if anyone know if is possible to create an azure alert for deleted virtual machines that displays the IP address of the virtual machine that has been deleted. I know that we have the Activity Log Alerts but they do not display the IP address. I created the following query:

 

AzureActivity
| where Authorization_d.action == "Microsoft.Compute/virtualMachines/delete"
| extend dummy = 1
| project TimeGenerated, ResourceGroup, Resource, Caller, dummy
| join kind=inner (
    Heartbeat
    | extend dummy = 1
    | project ResourceId, ComputerIP, dummy
) on dummy
| project TimeGenerated, ResourceGroup, Resource, Caller, ComputerIP

 

I joined the AzureActivity and Heartbeat table so I can get the computer IP. It is displaying the output that I want but the Log Alert is not firing even though I delete virtual machines.

Does anyone know if is possible to accomplish this?

Thank you!

Activity Logs
  • hatchhozzen007's avatar
    hatchhozzen007
    Copper Contributor
    Oct 17, 2023

    If a font is missing or not displaying correctly on a mobile preview of a website or application, there could be several reasons for this issue. Here are some common steps to diagnose and potentially resolve the problem:

    Web Font Loading: If you're using custom web fonts on your website or application, ensure that the font files and font-face declarations are correctly loaded. Check the CSS code to make sure you've specified the font family and font file paths high quality beats correctly. Verify that the font files are accessible from mobile devices.

    Cross-Origin Resource Sharing (CORS): If your   high quality beats [link removed by admin]   font files are hosted on a different domain, ensure that Cross-Origin Resource Sharing (CORS) headers are properly configured on the server where the font files are hosted. This is essential to allow mobile devices to access the font files from a different domain.

    Mobile Compatibility: Some fonts may not be well-supported on all mobile devices or browsers. Verify that the font you're using is compatible with the specific mobile devices and browsers you're targeting.

    Font File Formats: Ensure that you've included various font file formats (e.g., WOFF, WOFF2, TTF, EOT) in your CSS to ensure compatibility across different browsers and devices.

    Network Issues: Sometimes, font loading issues can be related to network problems. Check if your mobile device has a stable internet connection and can access the necessary resources.......

    • FabianChacon12's avatar
      FabianChacon12
      Copper Contributor
      Oct 17, 2023

      Hi hatchhozzen007 , thank you for your response. I am not using any mobile devices for this. The Azure Monitor Alert is not firing even though the condition is met. I want to know if is possible to create an alert that fires when a Virtual Machine is deleted, and it can display the IP address of the deleted machine.

  • Clive_Watson's avatar
    Clive_Watson
    Bronze Contributor
    Oct 17, 2023
    How is the alert setup, a screen shot will help. Also you should be able to join on the name of the resource (this is an example only)

    AzureActivity
    | where ResourceProviderValue == "MICROSOFT.COMPUTE"
    | where OperationNameValue == "MICROSOFT.COMPUTE/VIRTUALMACHINES/DELETE"
    | extend Computer = tostring(parse_json(Properties).resource)
    | join kind=inner
    (
    Heartbeat
    | project Computer, ComputerIP, ResourceId
    ) on Computer

Resources