Resource Graph and Log Analytics Join
in Uncategorized

This query correlates Azure Virtual Machines (VMs) with their security protection status, focusing on VMs with a ProtectionStatusRank of 450 (indicating a potential security concern). Key Steps: Purpose: This query helps in identifying security-vulnerable VMs while ensuring only actively monitored resources are included. 🚀
Continue reading

Computer – Heartbeat Missing – Azure Alert
in Azure KQL Query

This script is designed to track the heartbeat status of monitored resources in Azure using Kusto Query Language (KQL) Script Functionality How This Relates to the Alert Configuration This setup helps detect if any monitored resource has stopped sending heartbeat signals within a 10-minute threshold, potentially indicating downtime or connectivity issues.
Continue reading