Is there a way to deploy KQL - Time Series Query to get alerts for anomalies?

Question

We have a KQL query that reads last 365 days of data from custom table (Log analytics workspace) and using Time-series functions it calculates anomalies in it. Now we are looking for deploying this query to get an alert email if there is anomaly. Is it even possible?

Answer 1

Hi @D Mallikarjuna Reddy , This should be possible by using Azure Log Alerts. Until May 2023, log alert rules have supported running queries on Log Analytics and Application Insights data. But since then Microsoft introduced support for running queries also on Azure Data Explorer (ADX) tables, and even joining data between those data sources in a single query. Personally I did not use it yet, but over here you can find more information: https://azure.microsoft.com/en-us/updates/public-preview-azure-log-alerts-support-for-azure-data-explorer/ Kind regards, Wilko

---Please do not forget to "Accept the answer” wherever the information provided helps you, this can be beneficial to other community members. If you have extra questions about this answer, please click "Comment".