История

Muhammad Laraib Khan f8a19b0298 Screenshot update		2023-07-26 10:10:09 +02:00
..
images	Screenshot update	2023-07-26 10:10:09 +02:00
README.md	Update README.md	2023-07-25 16:13:49 +02:00
azuredeploy.json	Update azuredeploy.json	2023-07-20 20:15:12 +02:00

README.md

Send-UnhealthyAzureArcResourceAlert

author: Laraib khan

This playbook will query the Log Analytics workspace about each Azure Arc-enabled resource/server that has had its health status change to "Unavailable" in the past day and has been in that state for more than 30 minutes and Send that alert via Email.

Prerequisites

An Office 365 Email Account to enable Office 365 connection.

Post Deployment Steps

After deploying the playbook in your sentinel environment, you need to make changes to the actions as explained below:

Edit [Run query and list results] action

Select your respective:

Subscription
Resource Group
Resource Type
Resource Name

Edit [Send an Email] action

Replace email-id@domain.com with your own choice of email address where you want to receive/send email alerts.