An administrator is configuring an Azure Monitor action group to send alert notifications to a third-party IT Service Management (ITSM) system via a Webhook action. The administrator must ensure that the JSON payload structure is identical, regardless of whether the alert is based on a metric threshold, an activity log event, or a log search query. Which configuration should the administrator enable in the action group?
- Enable the common alert schemaAnswer
- BEnable the secure webhook option
- CConfigure an alert processing rule with a custom payload action
- DAdd a custom header to the Webhook action defining the alert type
Answer
Enable the common alert schema
Enabling the common alert schema standardizes the JSON payload format sent by Azure Monitor for all types of alerts (such as metric alerts, activity log alerts, and log search alerts). This allows downstream systems like ticketing platforms or custom APIs to parse incoming alerts using a single, unified data model rather than requiring custom parsers for each alert source.
Step-by-Step Solution
Key Concept
Azure Monitor Common Alert Schema