How do I check if Azure real-time alerting is configured correctly?

How do I check if Azure real-time alerting is configured correctly?

0
Created On 09/26/18 13:44 PM - Last Modified 07/19/22 23:08 PM


Symptom


How do I check if Azure real-time alerting is configured correctly?



Resolution


When configuring Azure real-time alerting, Evident Monitoring cannot confirm whether or not the configuration is done properly.  However, once real-time alerting is configured, you can check whether or not Evident Monitoring has received any events/messages from Azure.  You can check the last message received timestamp by doing the following:

  1. Login with Evident Monitoring
  2. Go to Control Panel -> External Accounts
  3. Find your Azure external account's external account ID.  You can do this by clicking on Edit.  This URL you get will be in this format https://esp.evident.io/control_panel/external_accounts/<external_account_id>/edit
  4. Use the external account ID from step 3 and go to this URL: https://esp.evident.io/api/v2/external_accounts/<external_account_id>/azure.json

 

The response will include a last_message_received_at field that tells you when is the last time Evident Monitoring received an event from Azure.  Note that this field is updated once an hour.  Sample output below:

 

{
  data: {
    id: "40",
    type: "external_account_azure",
    attributes: {
      subscription_id: "11111111-1111-1111-1111-111111111111",
      client_id: "22222222-2222-2222-2222-222222222222",
      tenant_id: "33333333-3333-3333-3333-333333333333",
      created_at: "2017-07-17T17:01:05.000Z",
      updated_at: "2018-06-05T19:21:00.000Z",
      last_message_received_at: "2018-06-05T19:44:20.000Z"
    },
    relationships: {
      external_account: {
        links: {
          related: "https://esp.evident.io/api/v2/external_accounts/7641.json"
        }
      }
    }
  }
}

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClmaCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail