Soru

Zorluk: ZorImplement Azure Monitor Alerts and Action Groups

You manage an Azure App Service plan hosting a critical web application. You have configured an Azure Monitor metric alert rule that uses dynamic thresholds to detect CPU spikes and trigger an action group to notify the operations team. A scheduled database synchronization job runs daily from 02:00 to 03:00 UTC, causing legitimate CPU spikes that trigger false positive alerts. You need to prevent notifications from being sent to the operations team during this period while keeping the alert rule active for reporting and historical analysis. What should you configure to achieve this?

  1. An alert processing rule configured to suppress notifications during the daily maintenance windowCevap
  2. B
    A Webhook action within the action group that calls an Azure Function to disable the metric alert rule at 02:00 UTC and enable it at 03:00 UTC
  3. C
    A custom time-of-day restriction condition directly within the metric alert rule signal logic
  4. D
    An Azure Automation runbook that runs daily to remove the receivers from the action group at 02:00 UTC and add them back at 03:00 UTC

Cevap

An alert processing rule configured to suppress notifications during the daily maintenance window
The correct answer is the option that suggests configuring an alert processing rule to suppress notifications. This is because alert processing rules in Azure Monitor allow you to post-process alerts. By setting up a suppression rule on a daily schedule, the metric alert rule continues to evaluate and log alerts in the Azure portal, preserving the historical data required for reporting, while preventing the action group from sending notifications to the operations team.

Adım Adım Çözüm

1
Analyze the requirements for alert notifications.
The alerts must still fire and be recorded in history, but notifications (emails, SMS, etc.) must be suppressed during a specific daily schedule.
Disabling the alert rule or dynamically altering criteria prevents historical tracking of alerts.
2
Identify the Azure Monitor feature designed for altering alert notification behavior post-firing.
Alert processing rules (formerly action rules) allow suppression or modification of actions on fired alerts.
These rules operate on fired alerts without altering the definition or execution of the alert rules themselves.
3
Define the configuration for the alert processing rule.
Create a rule scoped to the App Service plan resource or resource group, select the Suppression action, and set the recurrence schedule to daily between 02:00 and 03:00 UTC.
This configuration natively suppresses notifications during the specified period while letting the alerts fire and be recorded.

Anahtar Kavram

Azure Monitor Alert Processing Rules and Notification Suppression
Bu soruyu puanla