SERVICE HEALTH CONFIG

Configure how Azure Service Health signals are queried and narrowed for lifecycle automation. Subscriptions & a custom Kusto query drive the filtering scope.

Subscriptions Comma separated subscription IDs or names.

URI

Kusto Query

servicehealthresources
| where type == "microsoft.resourcehealth/events" 
| extend eventType = tostring(properties.EventType)
| where eventType in ('HealthAdvisory', 'SecurityAdvisory')
| extend lastUpdate =  todatetime(tolong(properties.LastUpdateTime))
| where lastUpdate > ago(28d)
// try to replace HTML tags in the Summary by empty string
| extend temp1 = replace('\\<[\\w/]+\\>', '', tostring(properties.Summary))
| extend summary = replace('\\<[\\w/]+\\>', '', temp1)
| extend service = tostring(properties.Impact[0].ImpactedService)
| extend title = tostring(properties.Title)
| extend url = strcat('https://app.azure.com/h/', name)
| summarize arg_max (lastUpdate, *) by name
| project lastUpdate, eventType, name, service, ['title'], summary, url
// most recent update at the bottom, so we can paste new records to the end of an XLS
| sort by lastUpdate asc

Provide a full KQL statement; it will be sent as-is.

Welcome to Azure LCM Portal

SERVICE HEALTH CONFIG