{"id":213,"date":"2024-05-02T16:02:00","date_gmt":"2024-05-02T14:02:00","guid":{"rendered":"http:\/\/inzecloud.com\/?p=213"},"modified":"2025-03-06T19:41:18","modified_gmt":"2025-03-06T18:41:18","slug":"creer-des-alertes-log-analytics-dans-azure","status":"publish","type":"post","link":"https:\/\/inzecloud.com\/index.php\/2024\/05\/02\/creer-des-alertes-log-analytics-dans-azure\/","title":{"rendered":"Cr\u00e9er des alertes Log Analytics dans Azure"},"content":{"rendered":"<p>Depuis quelques semaines les alertes Log Analytics sont g\u00e9r\u00e9es dans Azure et non plus dans le portail OMS.<\/p>\n<p>Nous allons voir de quelle mani\u00e8re cr\u00e9er une alerte via le portail Azure.<\/p>\n<h4>Cr\u00e9er une alerte depuis le moteur de recherche de log dans Azure<\/h4>\n<p>La premi\u00e8re chose est de ce rendre sur votre espace Azure Log Analytics<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-214 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_1-7.png?resize=640%2C236\" alt=\"\" width=\"640\" height=\"236\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_1-7.png?w=990&amp;ssl=1 990w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_1-7.png?resize=300%2C111&amp;ssl=1 300w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_1-7.png?resize=768%2C283&amp;ssl=1 768w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/p>\n<p>Puis de s\u00e9lectionner le Worspace cible pour votre alerte<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-215 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_2-4.png?resize=640%2C421\" alt=\"\" width=\"640\" height=\"421\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_2-4.png?w=703&amp;ssl=1 703w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_2-4.png?resize=300%2C197&amp;ssl=1 300w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/p>\n<p>Acc\u00e9dez ensuite \u00e0 la partie Log Search, le moteur de requ\u00eate de Log Analytics.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-216 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_3-4.png?resize=640%2C133\" alt=\"\" width=\"640\" height=\"133\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_3-4.png?w=757&amp;ssl=1 757w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_3-4.png?resize=300%2C62&amp;ssl=1 300w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/p>\n<p>Vous pouvez ainsi tester votre requ\u00eate pr\u00e9f\u00e9r\u00e9e. Ici la requ\u00eate permet de remonter le % d&rsquo;utilisation CPU avec un taux \u00e9chantillonnage \u00e0 1 minute.<\/p>\n<p>Une fois la requ\u00eate satisfaisante, cliquez sur \u00ab\u00a0<strong>+ New Alert Rule<\/strong>\u00a0\u00bb<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_4-5.png\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-217 size-large\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_4-5.png?resize=640%2C268\" alt=\"\" width=\"640\" height=\"268\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_4-5.png?resize=1024%2C429&amp;ssl=1 1024w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_4-5.png?resize=300%2C126&amp;ssl=1 300w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_4-5.png?resize=768%2C322&amp;ssl=1 768w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_4-5.png?w=1651&amp;ssl=1 1651w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_4-5.png?w=1280 1280w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>Nous voil\u00e0 maintenant dans la partie cr\u00e9ation de l&rsquo;alerte.<\/p>\n<p>Par d\u00e9faut la cible est positionn\u00e9e sur votre espace Log analytics et c&rsquo;est tr\u00e8s bien comme \u00e7\u00e0 \ud83d\ude42<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-218 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_5-3.png?resize=640%2C286\" alt=\"\" width=\"640\" height=\"286\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_5-3.png?w=1124&amp;ssl=1 1124w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_5-3.png?resize=300%2C134&amp;ssl=1 300w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_5-3.png?resize=768%2C343&amp;ssl=1 768w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_5-3.png?resize=1024%2C457&amp;ssl=1 1024w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/p>\n<p>Il faut ensuite cliquer sur la partie \u00ab\u00a0<strong>Alert Criteria<\/strong>\u00a0\u00bb afin de d\u00e9finir les conditions exacte de d\u00e9clenchement de notre alerte.<\/p>\n<p>La requ\u00eate est automatiquement r\u00e9cup\u00e9r\u00e9e. Il faut ensuite d\u00e9finir la <strong>logique<\/strong> de notre alerte. Ici c&rsquo;est un d\u00e9passement de seuil (80%) 3x de suite sur un intervalle de 5 minutes.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-219 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_6-4.png?resize=578%2C636\" alt=\"\" width=\"578\" height=\"636\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_6-4.png?w=578&amp;ssl=1 578w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_6-4.png?resize=273%2C300&amp;ssl=1 273w\" sizes=\"auto, (max-width: 578px) 100vw, 578px\" \/><\/p>\n<p>Il faut encore d\u00e9crire notre alerte, lui donner un petit nom et une description.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-220 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_7-1.png?resize=640%2C295\" alt=\"\" width=\"640\" height=\"295\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_7-1.png?w=758&amp;ssl=1 758w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_7-1.png?resize=300%2C138&amp;ssl=1 300w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/p>\n<p>La derni\u00e8re partie de la cr\u00e9ation permet de d\u00e9finir les actions associ\u00e9es au d\u00e9clenchement de notre alerte. Pour \u00e7a il faudra d\u00e9finir un \u00ab\u00a0Action group\u00a0\u00bb en cliquant sur <strong>\u00ab\u00a0+ New Action Group\u00a0\u00bb<\/strong>.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-221 size-large\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_8-1.png?resize=640%2C146\" alt=\"\" width=\"640\" height=\"146\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_8-1.png?resize=1024%2C233&amp;ssl=1 1024w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_8-1.png?resize=300%2C68&amp;ssl=1 300w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_8-1.png?resize=768%2C174&amp;ssl=1 768w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_8-1.png?w=1030&amp;ssl=1 1030w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/p>\n<p>Pour d\u00e9finir un groupe d&rsquo;action, il faut lui donner un nom (long et court) et choisir un ressource group.<\/p>\n<p>Ensuite \u00e0 vous de d\u00e9finir quelle(s) action(s) doivent \u00eatres r\u00e9alis\u00e9es : Mail, SMS pour la partie communication mais aussi de l&rsquo;automatisation (Runbook, function, webhook) et m\u00eame la cr\u00e9ation d&rsquo;incident dans votre logiciel ITSM pr\u00e9f\u00e9r\u00e9 (enfin pas tous &#8230;)<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-222 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_9.png?resize=574%2C469\" alt=\"\" width=\"574\" height=\"469\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_9.png?w=574&amp;ssl=1 574w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_9.png?resize=300%2C245&amp;ssl=1 300w\" sizes=\"auto, (max-width: 574px) 100vw, 574px\" \/><\/p>\n<p>Ici j&rsquo;ai choisi d&rsquo;envoyer un mail<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-223 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_10.png?resize=330%2C578\" alt=\"\" width=\"330\" height=\"578\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_10.png?w=330&amp;ssl=1 330w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_10.png?resize=171%2C300&amp;ssl=1 171w\" sizes=\"auto, (max-width: 330px) 100vw, 330px\" \/><\/p>\n<p>En fois le groupe d&rsquo;action cr\u00e9\u00e9 vous pourrez l&rsquo;utiliser dans d&rsquo;autres alertes.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-224 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_11.png?resize=640%2C236\" alt=\"\" width=\"640\" height=\"236\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_11.png?w=1081&amp;ssl=1 1081w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_11.png?resize=300%2C111&amp;ssl=1 300w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_11.png?resize=768%2C283&amp;ssl=1 768w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_11.png?resize=1024%2C378&amp;ssl=1 1024w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/p>\n<p>Il suffit maintenant de cliquer sur <strong>\u00ab\u00a0Create alert rule\u00a0\u00bb<\/strong> et de patienter quelques secondes &#8230;<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-225\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_12.png?resize=300%2C88\" alt=\"\" width=\"300\" height=\"88\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_12.png?resize=300%2C88&amp;ssl=1 300w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_12.png?w=379&amp;ssl=1 379w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/p>\n<p>Vous pouvez ensuite retrouver et g\u00e9rer (activer, d\u00e9sactiver, modifier, supprimer) toutes vos alertes dans la partie \u00ab\u00a0Alerts\u00a0\u00bb<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-226 size-full\" src=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_13.png?resize=640%2C447\" alt=\"\" width=\"640\" height=\"447\" srcset=\"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_13.png?w=1004&amp;ssl=1 1004w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_13.png?resize=300%2C209&amp;ssl=1 300w, https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/Screenshot_13.png?resize=768%2C536&amp;ssl=1 768w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Enjoy !<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Depuis quelques semaines les alertes Log Analytics sont g\u00e9r\u00e9es dans Azure et non plus dans le portail OMS. Nous allons voir de quelle mani\u00e8re cr\u00e9er une alerte via le portail Azure. Cr\u00e9er une alerte depuis le moteur de recherche de&#8230;<\/p>\n","protected":false},"author":1,"featured_media":230,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[5],"tags":[32,6,8,33,7],"class_list":["post-213","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-log-analytics","tag-alert","tag-azure","tag-log-analytics","tag-monitoring","tag-oms"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/inzecloud.com\/wp-content\/uploads\/2018\/05\/statsd-27b6679e2f6a14793bcbe0d4b73c450d.gif?fit=600%2C543&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9Wlas-3r","_links":{"self":[{"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/posts\/213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/comments?post=213"}],"version-history":[{"count":4,"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/posts\/213\/revisions"}],"predecessor-version":[{"id":565,"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/posts\/213\/revisions\/565"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/media\/230"}],"wp:attachment":[{"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/media?parent=213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/categories?post=213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/inzecloud.com\/index.php\/wp-json\/wp\/v2\/tags?post=213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}