How to see Azure Alerts: Query rules and Activity Log in SCOM through Azure Management Pack

Azure Management pack https://www.microsoft.com/en-us/download/details.aspx?id=50013 is designed to enable hybrid scenario where SCOM is used as a single pane of glass to monitor both Azure and on-prem resources. If you want to monitor your Azure resources like Virtual machines, Storage accounts, Application Insights, Azure Data factory (just to name few) in SCOM, then Azure MP can certainly help. 

Azure gives you an option to create Alerts based on the metrics or logs collected through telemetry. Today we will talk about how Azure MP brings Log Search and Activity Log alerts from Azure in SCOM for your Azure resource. 

Let’s start:

We have an availability test where we are pinging a url from 16 locations every 5 minutes. We have configured Log search alert named “SummitDemoAvailTest” for a threshold lesser than 16.

Now we will configure an Activity Log alert named “Run Command on DemoVM1” for an activity “Run command on Virtual Machine”. 

Now that these alerts are configured in portal,  let’s learn how we can see them in SCOM.

Configure Azure MP in SCOM

We will import Azure Management pack and connect to Azure subscription via Administration tab in SCOM console.

Under Authoring-> Add Monitoring Wizard we will select Service Types as scheduledqueryrules and activitylogalerts for monitoring. and complete the wizard and we are done.

Under Monitoring tab -> Microsoft Azure -> Service State, we can see alerts we had configured in Azure. The name also contains the type which helps to easily  identify the type of alert from the name itself.