Switch API preference for Log Alerts
Published date: 01 May, 2019
Until recently, you managed alert rules in the Microsoft Operations Management Suite portal. The new alerts experience was integrated with various services in Microsoft Azure including Log Analytics and we asked to extend your alert rules from OMS portal to Azure. But to ensure minimal disruption for customers, the process did not alter the programmatic interface for its consumption - Log Analytics Alert API based on SavedSearch.
But now you announce for Log Analytics alerting users a true Azure programmatic alternative, Azure Monitor - ScheduledQueryRules API, which is also reflective in your Azure billing - for log alerts. To learn more on how to manage your log alerts using the scheduledQueryRules API, see Managing log alerts using Azure Resource Template and Managing log alerts using PowerShell, CLI, or API.
Switching to ScheduledQueryRules API
Currently, by default in Azure portal – the legacy Log Analytics Alert API is used for creating & managing new log alert rules. Now customers can instead change their preference to use ScheduledQueryRules API, without disruption to their monitoring by following some simple steps, detailed here. And gain many benefits and functionality like using cross resource queries in log alert rule, fetch up to 48 hours of data in alert query, access to all future improvements in log alert rules and more.
Starting June 1, 2019 – for any new Log Analytics workspace created in Azure public cloud will start to use ScheduledQueryRules API for log alert rule creation and management in Azure portal. Additionally, the best practices for queries in log alert rules will also be enforced via log alert API interfaces starting June 1, 2019.