Create an Alert Rule in Azure Monitor for VM Event Logs | Exam AZ-104

Azure Monitor Alert Rule for System Event Log Errors on VM1

Question

You have an Azure virtual machine named VM1.

Azure collects events from VM1.

You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1.

Which target resource should you monitor in the alert rule?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D

For the first step to create the new alert tule, under the Create Alert section, you are going to select your Log Analytics workspace as the resource, since this is a log based alert signal.

https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/configure-azure-monitor

To create an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1, you need to select the appropriate target resource in the alert rule.

The target resource is the resource that the alert rule monitors for the specified conditions and triggers an alert if those conditions are met.

In this scenario, since the requirement is to monitor the System event log of VM1, the target resource that should be monitored in the alert rule is the Virtual Machine (VM1).

Option A: Virtual Machine Extension - This option is not correct as virtual machine extensions are used to add functionalities and features to a VM, such as custom scripts or anti-virus software. They do not collect event data or provide alerts.

Option B: Virtual Machine - This is the correct option as it allows you to select the specific virtual machine (VM1) that you want to monitor for the System event log and set the alert conditions for the log.

Option C: Metric Alert - Metric Alerts are used to monitor metrics on a resource such as CPU usage or disk space utilization. They are not suitable for monitoring event logs.

Option D: Azure Log Analytics Workspace - This option is not required as the alert rule can directly monitor the event log of the VM1, without needing to use Log Analytics.

Therefore, the correct answer is Option B: Virtual Machine.