Get-AzAlertHistory
Gets the history of classic alert rules.
Syntax
Get-AzAlertHistory
[-ResourceId <String>]
[-StartTime <DateTime>]
[-EndTime <DateTime>]
[-Status <String>]
[-Caller <String>]
[-DetailedOutput]
[-DefaultProfile <IAzureContextContainer>]
[<CommonParameters>]
Description
The Get-AzAlertHistory cmdlet gets the history of classic alert rules as they are enabled, disabled, fired, resolved, and so on.
Examples
Example 1: Get the alert history
Get-AzAlertHistory -StartTime 2015-02-11T11:00:00 -EndTime 2015-02-11T12:00:00 -DetailedOutput
Authorization :
Caller : Microsoft.Insights/alertRules
Claims :
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzg4ODU3OTI5OTI2
Description : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' has been resolved for Website:
garyyang1 (Default-Web-EastUS)
EventDataId : 769fab1c-fc9f-4e18-bc3a-fa79fbdd3616
EventName : Alert
EventSource : Microsoft.Insights/alertrules
EventTimestamp : 2/11/2015 7:14:45 PM
HttpRequest :
Id : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/events/769fab1c-fc
9f-4e18-bc3a-fa79fbdd3616/ticks/635592788857929926
Level : Informational
OperationId : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzg4ODU3OTI5OTI2
OperationName : ResolveAlert
Properties :
RuleUri : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleName : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleDescription:
Threshold : 3
WindowSizeInMinutes: 5
Aggregation : Total
Operator : GreaterThan
MetricName : CpuTime
MetricUnit : Count
ResourceGroupName : Default-Web-EastUS
ResourceProviderName : Microsoft.Insights
ResourceId : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
Status : Resolved
SubmissionTimestamp : 2/11/2015 7:14:45 PM
SubscriptionId : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus :
Authorization :
Caller : Microsoft.Insights/alertRules
Claims :
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
Description : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' was activated for Website: garyyang1
(Default-Web-EastUS)
EventDataId : 66277c94-2097-4f5f-860d-e585f1206cd7
EventName : Alert
EventSource : Microsoft.Insights/alertrules
EventTimestamp : 2/11/2015 7:04:46 PM
HttpRequest :
Id : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
microsoft.web/sites/garyyang1/events/66277c94-2097-4f5f-860d-e585f1206cd7/ticks/6355927828650595
14
Level : Error
OperationId : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
OperationName : ActivateAlert
Properties :
RuleUri : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleName : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleDescription:
Threshold : 3
WindowSizeInMinutes: 5
Aggregation : Total
Operator : GreaterThan
MetricName : CpuTime
MetricUnit : Count
ResourceGroupName : Default-Web-EastUS
ResourceProviderName : microsoft.web
ResourceId : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
microsoft.web/sites/garyyang1
Status : Activated
SubmissionTimestamp : 2/11/2015 7:04:46 PM
SubscriptionId : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus :
Authorization :
Caller : Microsoft.Insights/alertRules
Claims :
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
Description : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' was activated for Website: garyyang1
(Default-Web-EastUS)
EventDataId : ec9f7b3c-c6ea-4b45-bd15-ff43e38491e3
EventName : Alert
EventSource : Microsoft.Insights/alertrules
EventTimestamp : 2/11/2015 7:04:46 PM
HttpRequest :
Id : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/events/ec9f7b3c-c6
ea-4b45-bd15-ff43e38491e3/ticks/635592782865059514
Level : Error
OperationId : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
OperationName : ActivateAlert
Properties :
RuleUri : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleName : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleDescription:
Threshold : 3
WindowSizeInMinutes: 5
Aggregation : Total
Operator : GreaterThan
MetricName : CpuTime
MetricUnit : Count
ResourceGroupName : Default-Web-EastUS
ResourceProviderName : Microsoft.Insights
ResourceId : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
Status : Activated
SubmissionTimestamp : 2/11/2015 7:04:46 PM
SubscriptionId : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus :
This command gets the alert history for the specified time frame for the current subscription.
Example 2: Get alert history for a specified resource
Get-AzAlertHistory -StartTime 2015-02-11T11:00:00 -EndTime 2015-02-11T12:00:00 -ResourceId "/subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1" -DetailedOutput
Authorization :
Caller : Microsoft.Insights/alertRules
Claims :
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzg4ODU3OTI5OTI2
Description : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' has been resolved for Website:
garyyang1 (Default-Web-EastUS)
EventDataId : 769fab1c-fc9f-4e18-bc3a-fa79fbdd3616
EventName : Alert
EventSource : Microsoft.Insights/alertrules
EventTimestamp : 2/11/2015 7:14:45 PM
HttpRequest :
Id : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/events/769fab1c-fc
9f-4e18-bc3a-fa79fbdd3616/ticks/635592788857929926
Level : Informational
OperationId : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzg4ODU3OTI5OTI2
OperationName : ResolveAlert
Properties :
RuleUri : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleName : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleDescription:
Threshold : 3
WindowSizeInMinutes: 5
Aggregation : Total
Operator : GreaterThan
MetricName : CpuTime
MetricUnit : Count
ResourceGroupName : Default-Web-EastUS
ResourceProviderName : Microsoft.Insights
ResourceId : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
Status : Resolved
SubmissionTimestamp : 2/11/2015 7:14:45 PM
SubscriptionId : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus :
Authorization :
Caller : Microsoft.Insights/alertRules
Claims :
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/spn: Microsoft.Insights/alertRules
CorrelationId : /subscriptions/aaaa0000-bb11-2222-33cc-444444dddddd/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
Description : 'CpuTime GreaterThan 3 ([Count]) in the last 5 minutes' was activated for Website: garyyang1
(Default-Web-EastUS)
EventDataId : ec9f7b3c-c6ea-4b45-bd15-ff43e38491e3
EventName : Alert
EventSource : Microsoft.Insights/alertrules
EventTimestamp : 2/11/2015 7:04:46 PM
HttpRequest :
Id : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/events/ec9f7b3c-c6
ea-4b45-bd15-ff43e38491e3/ticks/635592782865059514
Level : Error
OperationId : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1/incidents/L3N1YnNj
cmlwdGlvbnMvYTkzZmIwN2MtNmM5My00MGJlLWJmM2ItNGYwZGViYTEwZjRiL3Jlc291cmNlR3JvdXBzL0RlZmF1bHQtV2Vi
LUVhc3RVUy9wcm92aWRlcnMvbWljcm9zb2Z0Lmluc2lnaHRzL2FsZXJ0cnVsZXMvY2hlY2tydWxlMy00YjEzNTQwMS1hMzBj
LTQyMjQtYWUyMS1mYTUzYTViZDI1M2QwNjM1NTkyNzgyODY1MDU5NTE0
OperationName : ActivateAlert
Properties :
RuleUri : /subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/Default-Web-
EastUS/providers/Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleName : checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
RuleDescription:
Threshold : 3
WindowSizeInMinutes: 5
Aggregation : Total
Operator : GreaterThan
MetricName : CpuTime
MetricUnit : Count
ResourceGroupName : Default-Web-EastUS
ResourceProviderName : Microsoft.Insights
ResourceId : /subscriptions/ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0/resourceGroups/Default-Web-EastUS/providers/
Microsoft.Insights/alertrules/checkrule3-a0a0a0a0-bbbb-cccc-dddd-e1e1e1e1e1e1
Status : Activated
SubmissionTimestamp : 2/11/2015 7:04:46 PM
SubscriptionId : ffffffff-eeee-dddd-cccc-bbbbbbbbbbb0
SubStatus :
This command gets the alert rule-related events for a specified resource.
Parameters
-Caller
Specifies the caller.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-DefaultProfile
The credentials, account, tenant, and subscription used for communication with azure
Type: | IAzureContextContainer |
Aliases: | AzContext, AzureRmContext, AzureCredential |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-DetailedOutput
Displays full details in the output.
Type: | SwitchParameter |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-EndTime
Specifies the end time of the query in local time. The default is the current time.
Type: | Nullable<T>[DateTime] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-ResourceId
Specifies the resource ID the rule is associated with.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-StartTime
Specifies the start time of the query in local time. The default is the current local time minus one hour.
Type: | Nullable<T>[DateTime] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-Status
Specifies the status.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | True |
Accept wildcard characters: | False |
Inputs
Nullable<T>[[System.DateTime, System.Private.CoreLib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=7cec85d7bea7798e]]