Is there a way to deploy KQL - Time Series Query to get alerts for anomalies?

D Mallikarjuna Reddy 96 Reputation points
2024-02-07T14:35:49.07+00:00

We have a KQL query that reads last 365 days of data from custom table (Log analytics workspace) and using Time-series functions it calculates anomalies in it. Now we are looking for deploying this query to get an alert email if there is anomaly. Is it even possible?

Azure Data Explorer
Azure Data Explorer
An Azure data analytics service for real-time analysis on large volumes of data streaming from sources including applications, websites, and internet of things devices.
501 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Wilko van de Velde 2,226 Reputation points
    2024-02-07T15:29:35.5666667+00:00

    Hi @D Mallikarjuna Reddy , This should be possible by using Azure Log Alerts. Until May 2023, log alert rules have supported running queries on Log Analytics and Application Insights data. But since then Microsoft introduced support for running queries also on Azure Data Explorer (ADX) tables, and even joining data between those data sources in a single query. Personally I did not use it yet, but over here you can find more information: https://azure.microsoft.com/en-us/updates/public-preview-azure-log-alerts-support-for-azure-data-explorer/ Kind regards, Wilko

    ---Please do not forget to "Accept the answer” wherever the information provided helps you, this can be beneficial to other community members. If you have extra questions about this answer, please click "Comment".