Begin the remediation process of a Log Analytics alert from the alert Overview tab. This tab provides information on the alert, the log data associated with the anomalous behavior, CIs associated with the alert, and services impacted by it.

Before you begin

Important: From the Vancouver release onward, the Operator Workspace is deprecated and replaced with Service Operations Workspace.

Role required: evt_mgmt_operator, or evt_mgmt_user, or evt_mgmt_admin

Procedure

  1. Navigate to Workspaces > Service Operations Workspace.
  2. In the Service Operations Workspace, select the lists icon (Lists icon.).
  3. Select the appropriate list in the Alerts sub-list and navigate to the relevant alert or group.

    All Health Log Analytics alerts have the value Log Analytics in the Source column. The value in the Group column identifies the type of Log Analytics alert. See Types of Health Log Analytics alerts for a more detailed description of each type of alert or group.

    Tip: To preview an alert in the list, click its info icon (Info icon.).
  4. Select the alert number.

    The Overview tab displays.

  5. View the section of the Overview tab that provides the information that you need.
    For a description of the sections and cards, see Sections and cards on the alert Overview tab in Health Log Analytics.
    Note: Because some sections on the Overview tab show only a portion of the information, many sections include a link that displays different or more complete information.