Options for dashboarding and alerting

[tiny-dancer]

What are the options/plans for this data to be queryable from a dashboarding and alerting tool in Azure?

For example, trigger an alert (e.g. webhook) everytime a new public IP is created?

Thanks, this is awesome!

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: b0b3fab4-e51e-14d4-25cc-a753b0459044
• Version Independent ID: ade4ab02-b9bd-053d-6672-0617ef2cd750
• Content: Starter Azure Resource Graph queries
• Content Source: articles/governance/resource-graph/samples/starter.md
• Service: resource-graph
• GitHub Login: @DCtheGeek
• Microsoft Alias: dacoulte

[MohitGargMSFT]

@tiny-dancer Thanks for your feedback! We will investigate and update soon on it.

[DCtheGeek]

@tiny-dancer Glad you like the service! I can't speak to the future of the tool, but if those are features you want, I'd recommend posting them on the Governance UserVoice.

Resource Graph is about the existing properties of resources in Azure. Eventing on Resource Manager actions is likely better with Activity Log. The new Activity Log experience has an + Add activity log alert that helps you create a trigger based on existing activity in your environment. Let me know if that matches what you are looking for!

@MicrosoftDocs/azure-cxp-triage #in-progress

[femsulu]

@tiny-dancer closing this issue for now but dont hesitate to reply if you have any followup questions.

[tiny-dancer]

@DCtheGeek thanks for reference, my example was maybe too simplistic.

For example, trigger an alert (e.g. webhook) everytime a new public IP is created leveraging the extensive data available in resource graph response and not just activity log?

As it currently stands are there other options than an Activity log alert on new public ip, triggers function that first uses resource graph to query for more extensive details of the resource and then does the needy?

additionally, looks like the dashboarding is already tracked 👍

[DCtheGeek]

@tiny-dancer Lots of ways to approach that goal. You can use Runbooks, Functions, Event Grid, Event Hub, Flow/LogicApps (and probably some I'm not mentioning) to monitor for status change. Using the Activity Log makes it easy to receive an event instead of poll for it. Once you have that event, yes, I believe it makes sense to then use Resource Graph to query for more details of the resource that generated the event, and then perform your actions.

Realize that since it would be different actions (the triggered event and then the automation reading Resource Graph), it's possible that the resource (a public IP in your example) may have changed again between the two actions.

Glad UserVoice already had you covered!

[tiny-dancer]

thanks for the quick response and variety of options!

Once you have that event, yes, I believe it makes sense to then use Resource Graph to query for more details of the resource that generated the event, and then perform your actions.

look forward to your findings on timing to see if this indeed a practical approach.