Book Image

Microsoft Operations Management Suite Cookbook

By : Chiyo Odika
Book Image

Microsoft Operations Management Suite Cookbook

By: Chiyo Odika

Overview of this book

Microsoft Operations Management Suite Cookbook begins with an overview of how to hit the ground running with OMS insights and analytics. Next, you will learn to search and analyze data to retrieve actionable insights, review alert generation from the analyzed data, and use basic and advanced Log search queries in Azure Log Analytics. Following this, you will explore some other management solutions that provide functionality related to workload assessment, application dependency mapping, automation and configuration management, and security and compliance. You will also become well versed with the data protection and recovery functionalities of OMS Protection and Recovery, and learn how to use Azure Automation components and features in OMS. Finally you will learn how to evaluate key considerations for using the Security and Audit solution, and working with Security and Compliance in OMS. By the end of the book, you will be able to configure and utilize solution offerings in OMS, understand OMS workflows, how to unlock insights, integrate capabilities into new or existing workflows, manage configurations, and automate tasks and processes.
Table of Contents (11 chapters)

Working with search queries and alert rules

Alerts in OMS are created using search queries that are run at regular intervals. These alerts are stored in the OMS repository and can be retrieved and queried with a log search query. Alert data records in OMS can be analyzed using the Alert Management solution which we will review later on this chapter. Furthermore OMS allows for the integration of monitoring into your existing event management workflows, and also enables you to centrally monitor and manage work items across your ITSM products/ services.

In Log Analytics, you can create an alert from a log query. To generate an alert from a log query, you will need to define an alert rule in which you specify a search criteria with a log query, and run the query at regular intervals. An alert is then created when the query returns alert record results that match the defined criteria...