• https://learn.microsoft.com/en-us/azure/azure-monitor/overview
• https://learn.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine-alerts

• Azure Monitor collects platform metrics from Azure resources at a default frequency of 1 minute.

• https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-overview

• Alerts are composed of Alert Rules, Action Groups, and Actions.
• Alert Rules are composed of:
  • The resources to be monitored.
  • The signal or data from the resource.
  • Conditions.
• Action groups are a list of actions to take when an alert triggers
• Actions are things like, email, SMS, and push notifications. It also includes various forms of initiating automation (Azure Functions, webhooks, etc.).
• Alert processing rules: You can use alert processing rules to make modifications to triggered alerts as they're being fired. You can use alert processing rules to add or suppress action groups, apply filters, or have the rule processed on a predefined schedule.

• Alerts are stored for 30 days and are deleted after the 30-day retention period.
• A single Action Group supports multiple notification types (e.g. SMS, email, app push notifications, etc)
• Both SMS and voice are limited to no more than one notification every five minutes, or a max of 20 in 1 hour.

• Metric alerts
• Log search alerts
• Activity log alerts

• log and metric alerts can be stateless or stateful
• Stateless alerts fire each time the condition is met, even if fired previously.
• Stateful alerts fire when the condition is met. They don't fire again or trigger any more actions until the conditions are resolved.

• https://learn.microsoft.com/en-us/azure/azure-monitor/service-limits#action-groups
• https://learn.microsoft.com/en-us/training/modules/configure-alerts-responses/3-action-groups

• You can add up to five action groups to an alert rule.
• Action groups are executed concurrently, in no specific order.
• Multiple alert rules can use the same action group.

• Email: No more than 100 emails every hour for each email address per region
• SMS:
  • In production: No more than one SMS message every five minutes.
  • In a test action group: No more than one SMS every one minute.

• The KQL search operator can be used to search across multiple tables and columns for a specified value.

Azure Network Watcher provides a suite of tools to monitor, diagnose, view metrics, and enable or disable logs for Azure IaaS (Infrastructure-as-a-Service) resources. Network Watcher enables you to monitor and repair the network health of IaaS products like virtual machines (VMs), virtual networks (VNets), application gateways, load balancers, etc. Network Watcher isn't designed or intended for PaaS monitoring or Web analytics.

• Advisor is a digital cloud assistant that helps you follow best practices to optimize your Azure deployments. It analyzes your resource configuration and usage telemetry and then recommends solutions that can help you improve the cost effectiveness, performance, reliability, and security of your Azure resources.