Framework/Configurations/AlertMonitoring/AzSDK.AM.OMS.Searches.json
|
{
"$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { "omsWorkspaceLocation": { "type": "string", "defaultValue": "" }, "omsResourcegroup": { "type": "string", "defaultValue": "" }, "omsSubscriptionId": { "type": "string", "defaultValue": "" }, "omsWorkspaceName": { "type": "string", "defaultValue": "" }, "omsWorkspaceApiVersion": { "type": "string", "defaultValue": "2015-11-01-preview" } }, "variables": { "SearchCategory": "AzSDK_Searches", "SearchQuery_Dist_Sub": "Distribution_By_Subscription", "SearchQuery_Dist_Ctrl_Sev": "Distribution_By_Control_Severity", "SearchQuery_Dist_Resource": "Distribution_By_Resources", "SearchQuery_Dist_ControlIds": "Distribution_By_ControlIds", "SearchQuery_Dist_ControlStatus": "Distribution_By_ControlStatus" }, "resources": [ { "name": "[concat(parameters('omsWorkspaceName'), '/', variables('SearchQuery_Dist_Sub'))]", "type": "Microsoft.OperationalInsights/workspaces/savedSearches", "apiVersion": "2015-03-20", "location": "[resourceGroup().location]", "dependsOn": [], "properties": { "Category": "[variables('SearchCategory')]", "DisplayName": "[variables('SearchQuery_Dist_Sub')]", "Query": "Type=AzSDK_CL ControlStatus_s=Failed | measure count() by SubscriptionName_s", "Version": "1" } }, { "name": "[concat(parameters('omsWorkspaceName'), '/', variables('SearchQuery_Dist_Ctrl_Sev'))]", "type": "Microsoft.OperationalInsights/workspaces/savedSearches", "apiVersion": "2015-03-20", "location": "[resourceGroup().location]", "dependsOn": [], "properties": { "Category": "[variables('SearchCategory')]", "DisplayName": "[variables('SearchQuery_Dist_Ctrl_Sev')]", "Query": "Type=AzSDK_CL ControlStatus_s=Failed | measure count() by ControlSeverity_s", "Version": "1" } }, { "name": "[concat(parameters('omsWorkspaceName'), '/', variables('SearchQuery_Dist_Resource'))]", "type": "Microsoft.OperationalInsights/workspaces/savedSearches", "apiVersion": "2015-03-20", "location": "[resourceGroup().location]", "dependsOn": [], "properties": { "Category": "[variables('SearchCategory')]", "DisplayName": "[variables('SearchQuery_Dist_Resource')]", "Query": "Type=AzSDK_CL ControlStatus_s=Failed | measure count() by ResourceName_s", "Version": "1" } }, { "name": "[concat(parameters('omsWorkspaceName'), '/', variables('SearchQuery_Dist_ControlIds'))]", "type": "Microsoft.OperationalInsights/workspaces/savedSearches", "apiVersion": "2015-03-20", "location": "[resourceGroup().location]", "dependsOn": [], "properties": { "Category": "[variables('SearchCategory')]", "DisplayName": "[variables('SearchQuery_Dist_ControlIds')]", "Query": "Type=AzSDK_CL ControlStatus_s=Failed | measure count() by ControlId_s", "Version": "1" } }, { "name": "[concat(parameters('omsWorkspaceName'), '/', variables('SearchQuery_Dist_ControlStatus'))]", "type": "Microsoft.OperationalInsights/workspaces/savedSearches", "apiVersion": "2015-03-20", "location": "[resourceGroup().location]", "dependsOn": [], "properties": { "Category": "[variables('SearchCategory')]", "DisplayName": "[variables('SearchQuery_Dist_ControlStatus')]", "Query": "Type=AzSDK_CL | measure count() by ControlStatus_s", "Version": "1" } } ] } |