diff --git a/docs/content/patterns/alz/deploy/Remediate-Policies.md b/docs/content/patterns/alz/deploy/Remediate-Policies.md index ac095c056..62b842214 100644 --- a/docs/content/patterns/alz/deploy/Remediate-Policies.md +++ b/docs/content/patterns/alz/deploy/Remediate-Policies.md @@ -9,22 +9,22 @@ If you are in a brownfield scenario on the other hand, policies will be reportin To use the script do the following: - Log on to Azure PowerShell with an account with at least Resource Policy Contributor permissions at the pseudo-root management group level - Navigate to the root of the cloned repo -- To remediate for example the Alerting-Management initiative, assigned to the alz-platform-management Management Group run the following command: .src\script\Start-AMBARemediation.ps1 -managementGroupName alz-platform-management -policyName Alerting-Management. +- To remediate for example the Alerting-Management initiative, assigned to the alz-platform-management Management Group run the following command: .\patterns\alz\scripts\Start-AMBARemediation.ps1 -managementGroupName alz-platform-management -policyName Alerting-Management. - The script will return the output from the rest api calls which should be a status code 201. If the script fails, check the error message and ensure that the management group name and policy name are correct. - After running the script you should be able to see a number of remediation tasks initiated at the alz-platform-management. For convenience, assuming that the management hierarchy is fully aligned to ALZ, below are the commands required to remediate all policies assigned through the guidance provided in this repo: ```powershell #Modify the following variables to match your environment - $managementGroupID = "The pseudo root management group id parenting the identity, management and connectivity management groups" + $pseudoRootManagementGroup = "The pseudo root management group id parenting the identity, management and connectivity management groups" $identityManagementGroup = "The management group id for Identity" $managementManagementGroup = "The management group id for Management" $connectivityManagementGroup = "The management group id for Connectivity" $LZManagementGroup="The management group id for Landing Zones" #Run the following commands to initiate remediation - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $managementManagementGroup -policyName Alerting-Management - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $connectivityManagementGroup -policyName Alerting-Connectivity - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $identityManagementGroup -policyName Alerting-Identity - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $LZManagementGroup -policyName Alerting-LandingZone - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $managementGroupId -policyName Alerting-ServiceHealth + .\patterns\alz\scripts\Start-AMBARemediation.ps1 -managementGroupName $managementManagementGroup -policyName Alerting-Management + .\patterns\alz\scripts\Start-AMBARemediation.ps1 -managementGroupName $connectivityManagementGroup -policyName Alerting-Connectivity + .\patterns\alz\scripts\Start-AMBARemediation.ps1 -managementGroupName $identityManagementGroup -policyName Alerting-Identity + .\patterns\alz\scripts\Start-AMBARemediation.ps1 -managementGroupName $LZManagementGroup -policyName Alerting-LandingZone + .\patterns\alz\scripts\Start-AMBARemediation.ps1 -managementGroupName $pseudoRootManagementGroup -policyName Alerting-ServiceHealth ``` diff --git a/patterns/alz/alzArm.json b/patterns/alz/alzArm.json index 119ff068c..7f8e36f24 100644 --- a/patterns/alz/alzArm.json +++ b/patterns/alz/alzArm.json @@ -264,7 +264,7 @@ "scope": "[variables('scopes').connectivityManagementGroup]", "location": "[deployment().location]", "dependsOn": [ - "[variables('deploymentNames').AMBAPolicyDeploymentName]" + "policyCompletion" ], "properties": { "mode": "Incremental", @@ -291,7 +291,7 @@ "scope": "[variables('scopes').identityManagementGroup]", "location": "[deployment().location]", "dependsOn": [ - "[variables('deploymentNames').AMBAPolicyDeploymentName]" + "policyCompletion" ], "properties": { "mode": "Incremental", @@ -318,7 +318,7 @@ "scope": "[variables('scopes').lzsManagementGroup]", "location": "[deployment().location]", "dependsOn": [ - "[variables('deploymentNames').AMBAPolicyDeploymentName]" + "policyCompletion" ], "properties": { "mode": "Incremental", @@ -345,7 +345,7 @@ "scope": "[variables('scopes').managementManagementGroup]", "location": "[deployment().location]", "dependsOn": [ - "[variables('deploymentNames').AMBAPolicyDeploymentName]" + "policyCompletion" ], "properties": { "mode": "Incremental", @@ -372,7 +372,7 @@ "scope": "[variables('scopes').eslzRootManagementGroup]", "location": "[deployment().location]", "dependsOn": [ - "[variables('deploymentNames').AMBAPolicyDeploymentName]" + "policyCompletion" ], "properties": { "mode": "Incremental", diff --git a/patterns/alz/alzArm.param.json b/patterns/alz/alzArm.param.json index 467152736..17ead7a90 100644 --- a/patterns/alz/alzArm.param.json +++ b/patterns/alz/alzArm.param.json @@ -1,1505 +1,1817 @@ { - "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "enterpriseScaleCompanyPrefix": { - "value": "Contoso" - }, - "platformManagementGroup": { - "value": "Contoso-platform" - }, - "IdentityManagementGroup": { - "value": "Contoso-identity" - }, - "managementManagementGroup": { - "value": "Contoso-management" - }, - "connectivityManagementGroup": { - "value": "Contoso-connectivity" - }, - "LandingZoneManagementGroup": { - "value": "Contoso-landingzone" - }, - "enableAMBAConnectivity": { - "value": "Yes" - }, - "enableAMBAIdentity": { - "value": "Yes" - }, - "enableAMBALandingZone": { - "value": "Yes" - }, - "enableAMBAManagement": { - "value": "Yes" - }, - "enableAMBAServiceHealth": { - "value": "Yes" - }, - "telemetryOptOut": { - "value": "No" - }, - "policyAssignmentParametersCommon": { - "value": { - "ALZMonitorResourceGroupName": { - "value": "rg-alz-monitor" - }, - "ALZMonitorResourceGroupTags": { - "value": { - "Project": "alz-monitor" - } - }, - "ALZMonitorResourceGroupLocation": { - "value": "eastus" - } - } - }, - "policyAssignmentParametersServiceHealth": { - "value": { - "ALZMonitorActionGroupEmail": { - "value": "action@mail.com" - }, - "ResHlthUnhealthyAlertState": { - "value": "true" - }, - "SvcHlthAdvisoryAlertState": { - "value": "true" - }, - "SvcHlthIncidentAlertState": { - "value": "true" - }, - "SvcHlthMaintenanceAlertState": { - "value": "true" - }, - "svcHlthSecAdvisoryAlertState": { - "value": "true" - } - } - }, - "policyAssignmentParametersConnectivity": { - "value": { - "ERCIRQoSDropBitsinPerSecAlertSeverity": { - "value": "2" - }, - "ERCIRQoSDropBitsinPerSecWindowSize": { - "value": "PT5M" - }, - "ERCIRQoSDropBitsinPerSecEvaluationFrequency": { - "value": "PT5M" - }, - "ERCIRQoSDropBitsinPerSecPolicyEffect": { - "value": "deployIfNotExists" - }, - "ERCIRQoSDropBitsinPerSecAlertState": { - "value": "true" - }, - "ERCIRQoSDropBitsoutPerSecAlertSeverity": { - "value": "2" - }, - "ERCIRQoSDropBitsoutPerSecWindowSize": { - "value": "PT5M" - }, - "ERCIRQoSDropBitsoutPerSecEvaluationFrequency": { - "value": "PT5M" - }, - "ERCIRQoSDropBitsoutPerSecPolicyEffect": { - "value": "deployIfNotExists" - }, - "ERCIRQoSDropBitsoutPerSecAlertState": { - "value": "true" - }, - "VPNGwBGPPeerStatusAlertSeverity": { - "value": "3" - }, - "VPNGwBGPPeerStatusWindowSize": { - "value": "PT5M" - }, - "VPNGwBGPPeerStatusEvaluationFrequency": { - "value": "PT5M" - }, - "VPNGwBGPPeerStatusPolicyEffect": { - "value": "deployIfNotExists" - }, - "VPNGwBGPPeerStatusAlertState": { - "value": "true" - }, - "VPNGwBGPPeerStatusThreshold": { - "value": "1" - }, - "VnetGwERCpuUtilAlertSeverity": { - "value": "3" - }, - "VnetGwERCpuUtilWindowSize": { - "value": "PT5M" - }, - "VnetGwERCpuUtilEvaluationFrequency": { - "value": "PT1M" - }, - "VnetGwERCpuUtilPolicyEffect": { - "value": "deployIfNotExists" - }, - "VnetGwERCpuUtilAlertState": { - "value": "true" - }, - "VnetGwERCpuUtilThreshold": { - "value": "80" - }, - "VnetGwTunnelBWAlertSeverity": { - "value": "0" - }, - "VnetGwTunnelBWWindowSize": { - "value": "PT5M" - }, - "VnetGwTunnelBWEvaluationFrequency": { - "value": "PT1M" - }, - "VnetGwTunnelBWPolicyEffect": { - "value": "deployIfNotExists" - }, - "VnetGwTunnelBWAlertState": { - "value": "true" - }, - "VnetGwTunnelBWThreshold": { - "value": "1" - }, - "VnetGwTunnelEgressAlertSeverity": { - "value": "0" - }, - "VnetGwTunnelEgressWindowSize": { - "value": "PT5M" - }, - "VnetGwTunnelEgressEvaluationFrequency": { - "value": "PT5M" - }, - "VnetGwTunnelEgressPolicyEffect": { - "value": "disabled" - }, - "VnetGwTunnelEgressAlertState": { - "value": "true" - }, - "VnetGwTunnelEgressThreshold": { - "value": "1" - }, - "VnetGwTunnelIngressAlertSeverity": { - "value": "0" - }, - "VnetGwTunnelIngressWindowSize": { - "value": "PT5M" - }, - "VnetGwTunnelIngressEvaluationFrequency": { - "value": "PT5M" - }, - "VnetGwTunnelIngressPolicyEffect": { - "value": "disabled" - }, - "VnetGwTunnelIngressAlertState": { - "value": "true" - }, - "VnetGwTunnelIngressThreshold": { - "value": "1" - }, - "VPNGWBandWidthUtilAlertSeverity": { - "value": "0" - }, - "VPNGWBandWidthUtilWindowSize": { - "value": "PT5M" - }, - "VPNGWBandWidthUtilEvaluationFrequency": { - "value": "PT5M" - }, - "VPNGWBandWidthUtilPolicyEffect": { - "value": "deployIfNotExists" - }, - "VPNGWBandWidthUtilAlertState": { - "value": "true" - }, - "VPNGWBandWidthUtilThreshold": { - "value": "1" - }, - "VPNGWEgressAlertSeverity": { - "value": "0" - }, - "VPNGWEgressWindowSize": { - "value": "PT5M" - }, - "VPNGWEgressEvaluationFrequency": { - "value": "PT5M" - }, - "VPNGWEgressPolicyEffect": { - "value": "disabled" - }, - "VPNGWEgressAlertState": { - "value": "true" - }, - "VPNGWEgressThreshold": { - "value": "1" - }, - "VPNGWTunnelEgressPacketDropCountAlertSeverity": { - "value": "3" - }, - "VPNGWTunnelEgressPacketDropCountWindowSize": { - "value": "PT5M" - }, - "VPNGWTunnelEgressPacketDropCountFrequency": { - "value": "PT5M" - }, - "VPNGWTunnelEgressPacketDropCountPolicyEffect": { - "value": "deployIfNotExists" - }, - "VPNGWTunnelEgressPacketDropCountAlertState": { - "value": "true" - }, - "VPNGWTunnelEgressPacketDropMismatchAlertSeverity": { - "value": "3" - }, - "VPNGWTunnelEgressPacketDropMismatchWindowSize": { - "value": "PT5M" - }, - "VPNGWTunnelEgressPacketDropMismatchFrequency": { - "value": "PT5M" - }, - "VPNGWTunnelEgressPacketDropMismatchPolicyEffect": { - "value": "deployIfNotExists" - }, - "VPNGWTunnelEgressPacketDropMismatchAlertState": { - "value": "true" - }, - "VPNGWIngressAlertSeverity": { - "value": "0" - }, - "VPNGWIngressWindowSize": { - "value": "PT5M" - }, - "VPNGWIngressEvaluationFrequency": { - "value": "PT5M" - }, - "VPNGWIngressPolicyEffect": { - "value": "disabled" - }, - "VPNGWIngressAlertState": { - "value": "true" - }, - "VPNGWIngressThreshold": { - "value": "1" - }, - "VPNGWIngressAutoMitigate": { - "value": "true" - }, - "VPNGWTunnelIngressPacketDropCountAlertSeverity": { - "value": "3" - }, - "VPNGWTunnelIngressPacketDropCountWindowSize": { - "value": "PT5M" - }, - "VPNGWTunnelIngressPacketDropCountFrequency": { - "value": "PT5M" - }, - "VPNGWTunnelIngressPacketDropCountPolicyEffect": { - "value": "deployIfNotExists" - }, - "VPNGWTunnelIngressPacketDropCountAlertState": { - "value": "true" - }, - "VPNGWTunnelIngressPacketDropMismatchAlertSeverity": { - "value": "3" - }, - "VPNGWTunnelIngressPacketDropMismatchWindowSize": { - "value": "PT5M" - }, - "VPNGWTunnelIngressPacketDropMismatchFrequency": { - "value": "PT5M" - }, - "VPNGWTunnelIngressPacketDropMismatchPolicyEffect": { - "value": "deployIfNotExists" - }, - "VPNGWTunnelIngressPacketDropMismatchAlertState": { - "value": "true" - }, - "PDNSZCapacityUtilAlertSeverity": { - "value": "2" - }, - "PDNSZCapacityUtilWindowSize": { - "value": "PT1H" - }, - "PDNSZCapacityUtilEvaluationFrequency": { - "value": "PT1H" - }, - "PDNSZCapacityUtilPolicyEffect": { - "value": "deployIfNotExists" - }, - "PDNSZCapacityUtilAlertState": { - "value": "true" - }, - "PDNSZCapacityUtilThreshold": { - "value": "80" - }, - "PDNSZQueryVolumeAlertSeverity": { - "value": "4" - }, - "PDNSZQueryVolumeWindowSize": { - "value": "PT1H" - }, - "PDNSZQueryVolumeEvaluationFrequency": { - "value": "PT1H" - }, - "PDNSZQueryVolumePolicyEffect": { - "value": "disabled" - }, - "PDNSZQueryVolumeAlertState": { - "value": "true" - }, - "PDNSZQueryVolumeThreshold": { - "value": "500" - }, - "PDNSZRecordSetCapacityAlertSeverity": { - "value": "2" - }, - "PDNSZRecordSetCapacityWindowSize": { - "value": "PT1H" - }, - "PDNSZRecordSetCapacityEvaluationFrequency": { - "value": "PT1H" - }, - "PDNSZRecordSetCapacityPolicyEffect": { - "value": "deployIfNotExists" - }, - "PDNSZRecordSetCapacityAlertState": { - "value": "true" - }, - "PDNSZRecordSetCapacityThreshold": { - "value": "80" - }, - "PDNSZRegistrationCapacityUtilAlertSeverity": { - "value": "2" - }, - "PDNSZRegistrationCapacityUtilWindowSize": { - "value": "PT1H" - }, - "PDNSZRegistrationCapacityUtilEvaluationFrequency": { - "value": "PT1H" - }, - "PDNSZRegistrationCapacityUtilPolicyEffect": { - "value": "deployIfNotExists" - }, - "PDNSZRegistrationCapacityUtilAlertState": { - "value": "true" - }, - "PDNSZRegistrationCapacityUtilThreshold": { - "value": "80" - }, - "PIPDDoSAttackAlertSeverity": { - "value": "1" - }, - "PIPDDoSAttackWindowSize": { - "value": "PT5M" - }, - "PIPDDoSAttackEvaluationFrequency": { - "value": "PT5M" - }, - "PIPDDoSAttackPolicyEffect": { - "value": "deployIfNotExists" - }, - "PIPDDoSAttackAlertState": { - "value": "true" - }, - "PIPDDoSAttackThreshold": { - "value": "0" - }, - "PIPPacketsInDDoSAlertSeverity": { - "value": "4" - }, - "PIPPacketsInDDoSWindowSize": { - "value": "PT5M" - }, - "PIPPacketsInDDoSEvaluationFrequency": { - "value": "PT5M" - }, - "PIPPacketsInDDoSPolicyEffect": { - "value": "disabled" - }, - "PIPPacketsInDDoSAlertState": { - "value": "true" - }, - "PIPPacketsInDDoSThreshold": { - "value": "40000" - }, - "PIPVIPAvailabilityAlertSeverity": { - "value": "1" - }, - "PIPVIPAvailabilityWindowSize": { - "value": "PT5M" - }, - "PIPVIPAvailabilityEvaluationFrequency": { - "value": "PT1M" - }, - "PIPVIPAvailabilityPolicyEffect": { - "value": "deployIfNotExists" - }, - "PIPVIPAvailabilityAlertState": { - "value": "true" - }, - "PIPVIPAvailabilityThreshold": { - "value": "1" - }, - "PIPBytesInDDoSAlertSeverity": { - "value": "4" - }, - "PIPBytesInDDoSWindowSize": { - "value": "PT5M" - }, - "PIPBytesInDDoSEvaluationFrequency": { - "value": "PT5M" - }, - "PIPBytesInDDoSPolicyEffect": { - "value": "disabled" - }, - "PIPBytesInDDoSAlertState": { - "value": "true" - }, - "PIPBytesInDDoSThreshold": { - "value": "8000000" - }, - "ERGwExpressRouteBitsInAlertSeverity": { - "value": "0" - }, - "ERGwExpressRouteBitsInWindowSize": { - "value": "PT5M" - }, - "ERGwExpressRouteBitsInEvaluationFrequency": { - "value": "PT5M" - }, - "ERGwExpressRouteBitsInPolicyEffect": { - "value": "disabled" - }, - "ERGwExpressRouteBitsInAlertState": { - "value": "true" - }, - "ERGwExpressRouteBitsInThreshold": { - "value": "1" - }, - "ERGwExpressRouteBitsOutAlertSeverity": { - "value": "0" - }, - "ERGwExpressRouteBitsOutWindowSize": { - "value": "PT5M" - }, - "ERGwExpressRouteBitsOutEvaluationFrequency": { - "value": "PT5M" - }, - "ERGwExpressRouteBitsOutPolicyEffect": { - "value": "disabled" - }, - "ERGwExpressRouteBitsOutAlertState": { - "value": "true" - }, - "ERGwExpressRouteBitsOutThreshold": { - "value": "1" - }, - "ERGwExpressRouteCpuUtilAlertSeverity": { - "value": "1" - }, - "ERGwExpressRouteCpuUtilWindowSize": { - "value": "PT5M" - }, - "ERGwExpressRouteCpuUtilEvaluationFrequency": { - "value": "PT1M" - }, - "ERGwExpressRouteCpuUtilPolicyEffect": { - "value": "deployIfNotExists" - }, - "ERGwExpressRouteCpuUtilAlertState": { - "value": "true" - }, - "ERGwExpressRouteCpuUtilThreshold": { - "value": "80" - }, - "VNETDDOSAttackAlertSeverity": { - "value": "1" - }, - "VNETDDOSAttackWindowSize": { - "value": "PT5M" - }, - "VNETDDOSAttackEvaluationFrequency": { - "value": "PT1M" - }, - "VNETDDOSAttackPolicyEffect": { - "value": "deployIfNotExists" - }, - "VNETDDOSAttackAlertState": { - "value": "true" - }, - "VNETDDOSAttackThreshold": { - "value": "1" - }, - "VnetGwTunnelEgressPacketDropCountAlertSeverity": { - "value": "1" - }, - "VnetGwTunnelEgressPacketDropCountWindowSize": { - "value": "PT5M" - }, - "VnetGwTunnelEgressPacketDropCountEvaluationFrequency": { - "value": "PT5M" - }, - "VnetGwTunnelEgressPacketDropCountPolicyEffect": { - "value": "deployIfNotExists" - }, - "VnetGwTunnelEgressPacketDropCountAlertState": { - "value": "true" - }, - "VnetGwTunnelEgressPacketDropMismatchAlertSeverity": { - "value": "3" - }, - "VnetGwTunnelEgressPacketDropMismatchWindowSize": { - "value": "PT5M" - }, - "VnetGwTunnelEgressPacketDropMismatchEvaluationFrequency": { - "value": "PT5M" - }, - "VnetGwTunnelEgressPacketDropMismatchPolicyEffect": { - "value": "deployIfNotExists" - }, - "VnetGwTunnelEgressPacketDropMismatchAlertState": { - "value": "true" - }, - "VnetGwExpressRouteBitsPerSecondAlertSeverity": { - "value": "0" - }, - "VnetGwExpressRouteBitsPerSecondWindowSize": { - "value": "PT5M" - }, - "VnetGwExpressRouteBitsPerSecondEvaluationFrequency": { - "value": "PT1M" - }, - "VnetGwExpressRouteBitsPerSecondPolicyEffect": { - "value": "deployIfNotExists" - }, - "VnetGwExpressRouteBitsPerSecondAlertState": { - "value": "true" - }, - "VnetGwExpressRouteBitsPerSecondThreshold": { - "value": "1" - }, - "VnetGwTunnelIngressPacketDropMismatchAlertSeverity": { - "value": "3" - }, - "VnetGwTunnelIngressPacketDropMismatchWindowSize": { - "value": "PT5M" - }, - "VnetGwTunnelIngressPacketDropMismatchEvaluationFrequency": { - "value": "PT5M" - }, - "VnetGwTunnelIngressPacketDropMismatchPolicyEffect": { - "value": "deployIfNotExists" - }, - "VnetGwTunnelIngressPacketDropMismatchAlertState": { - "value": "true" - }, - "VnetGwTunnelIngressPacketDropCountAlertSeverity": { - "value": "3" - }, - "VnetGwTunnelIngressPacketDropCountWindowSize": { - "value": "PT5M" - }, - "VnetGwTunnelIngressPacketDropCountEvaluationFrequency": { - "value": "PT5M" - }, - "VnetGwTunnelIngressPacketDropCountPolicyEffect": { - "value": "deployIfNotExists" - }, - "VnetGwTunnelIngressPacketDropCountAlertState": { - "value": "true" - }, - "ERCIRBgpAvailabilityAlertSeverity": { - "value": "0" - }, - "ERCIRBgpAvailabilityWindowSize": { - "value": "PT5M" - }, - "ERCIRBgpAvailabilityEvaluationFrequency": { - "value": "PT1M" - }, - "ERCIRBgpAvailabilityPolicyEffect": { - "value": "deployIfNotExists" - }, - "ERCIRBgpAvailabilityAlertState": { - "value": "true" - }, - "ERCIRBgpAvailabilityThreshold": { - "value": "90" - }, - "ERCIRArpAvailabilityAlertSeverity": { - "value": "0" - }, - "ERCIRArpAvailabilityWindowSize": { - "value": "PT5M" - }, - "ERCIRArpAvailabilityFrequency": { - "value": "PT1M" - }, - "ERCIRArpAvailabilityPolicyEffect": { - "value": "deployIfNotExists" - }, - "ERCIRArpAvailabilityAlertState": { - "value": "true" - }, - "ERCIRArpAvailabilityThreshold": { - "value": "90" - }, - "AFWSNATPortUtilizationAlertSeverity": { - "value": "1" - }, - "AFWSNATPortUtilizationWindowSize": { - "value": "PT5M" - }, - "AFWSNATPortUtilizationFrequency": { - "value": "PT1M" - }, - "AFWSNATPortUtilizationPolicyEffect": { - "value": "deployIfNotExists" - }, - "AFWSNATPortUtilizationAlertState": { - "value": "true" - }, - "AFWSNATPortUtilizationThreshold": { - "value": "80" - }, - "FirewallHealthAlertSeverity": { - "value": "0" - }, - "FirewallHealthWindowSize": { - "value": "PT5M" - }, - "FirewallHealthEvaluationFrequency": { - "value": "PT1M" - }, - "FirewallHealthPolicyEffect": { - "value": "deployIfNotExists" - }, - "FirewallHealthAlertState": { - "value": "true" - }, - "FirewallHealthThreshold": { - "value": "90" - }, - "activityFWDeleteAlertState": { - "value": "true" - }, - "activityNSGDeleteAlertState": { - "value": "true" - }, - "activityUDRUpdateAlertState": { - "value": "true" - }, - "activityVPNGWDeleteAlertState": { - "value": "true" - } - } - }, - "policyAssignmentParametersIdentity": { - "value": { - "KVRequestAlertSeverity": { - "value": "2" - }, - "KVRequestWindowSize": { - "value": "PT5M" - }, - "KVRequestEvaluationFrequency": { - "value": "PT5M" - }, - "KVRequestPolicyEffect": { - "value": "disabled" - }, - "KVRequestAlertState": { - "value": "true" - }, - "KvAvailabilityAlertSeverity": { - "value": "1" - }, - "KvAvailabilityWindowSize": { - "value": "PT1M" - }, - "KvAvailabilityEvaluationFrequency": { - "value": "PT1M" - }, - "KvAvailabilityPolicyEffect": { - "value": "disabled" - }, - "KvAvailabilityAlertState": { - "value": "true" - }, - "KVAvailabilityThreshold": { - "value": "20" - }, - "KvLatencyAvailabilityAlertSeverity": { - "value": "3" - }, - "KvLatencyAvailabilityWindowSize": { - "value": "PT5M" - }, - "KvLatencyAvailabilityEvaluationFrequency": { - "value": "PT5M" - }, - "KvLatencyAvailabilityPolicyEffect": { - "value": "disabled" - }, - "KvLatencyAvailabilityAlertState": { - "value": "true" - }, - "KvLatencyAvailabilityThreshold": { - "value": "1000" - }, - "KVCapacityAlertSeverity": { - "value": "1" - }, - "KVCapacityWindowSize": { - "value": "PT5M" - }, - "KVCapacityEvaluationFrequency": { - "value": "PT1M" - }, - "KVCapacityPolicyEffect": { - "value": "disabled" - }, - "KVCapacityAlertState": { - "value": "true" - }, - "KVCapacityThreshold": { - "value": "75" - }, - "activityKVDeleteAlertState": { - "value": "true" - } - } - }, - "policyAssignmentParametersLandingZone": { - "value": { - "KVRequestAlertSeverity": { - "value": "2" - }, - "KVRequestWindowSize": { - "value": "PT5M" - }, - "KVRequestEvaluationFrequency": { - "value": "PT5M" - }, - "KVRequestPolicyEffect": { - "value": "disabled" - }, - "KVRequestAlertState": { - "value": "true" - }, - "KvAvailabilityAlertSeverity": { - "value": "1" - }, - "KvAvailabilityWindowSize": { - "value": "PT1M" - }, - "KvAvailabilityEvaluationFrequency": { - "value": "PT1M" - }, - "KvAvailabilityPolicyEffect": { - "value": "disabled" - }, - "KvAvailabilityAlertState": { - "value": "true" - }, - "KVAvailabilityThreshold": { - "value": "20" - }, - "KvLatencyAvailabilityAlertSeverity": { - "value": "3" - }, - "KvLatencyAvailabilityWindowSize": { - "value": "PT5M" - }, - "KvLatencyAvailabilityEvaluationFrequency": { - "value": "PT5M" - }, - "KvLatencyAvailabilityPolicyEffect": { - "value": "disabled" - }, - "KvLatencyAvailabilityAlertState": { - "value": "true" - }, - "KvLatencyAvailabilityThreshold": { - "value": "1000" - }, - "KVCapacityAlertSeverity": { - "value": "1" - }, - "KVCapacityWindowSize": { - "value": "PT5M" - }, - "KVCapacityEvaluationFrequency": { - "value": "PT1M" - }, - "KVCapacityPolicyEffect": { - "value": "disabled" - }, - "KVCapacityAlertState": { - "value": "true" - }, - "KVCapacityThreshold": { - "value": "75" - }, - "activityKVDeleteAlertState": { - "value": "true" - }, - "StorageAccountAvailabilityAlertSeverity": { - "value": "1" - }, - "StorageAccountAvailabilityWindowSize": { - "value": "PT5M" - }, - "StorageAccountAvailabilityFrequency": { - "value": "PT5M" - }, - "StorageAccountAvailabilityPolicyEffect": { - "value": "deployIfNotExists" - }, - "StorageAccountAvailabilityAlertState": { - "value": "true" - }, - "StorageAccountAvailabilityThreshold": { - "value": "90" - }, - "PIPDDoSAttackAlertSeverity": { - "value": "1" - }, - "PIPDDoSAttackWindowSize": { - "value": "PT5M" - }, - "PIPDDoSAttackEvaluationFrequency": { - "value": "PT5M" - }, - "PIPDDoSAttackPolicyEffect": { - "value": "deployIfNotExists" - }, - "PIPDDoSAttackAlertState": { - "value": "true" - }, - "PIPDDoSAttackThreshold": { - "value": "0" - }, - "PIPPacketsInDDoSAlertSeverity": { - "value": "4" - }, - "PIPPacketsInDDoSWindowSize": { - "value": "PT5M" - }, - "PIPPacketsInDDoSEvaluationFrequency": { - "value": "PT5M" - }, - "PIPPacketsInDDoSPolicyEffect": { - "value": "disabled" - }, - "PIPPacketsInDDoSAlertState": { - "value": "true" - }, - "PIPPacketsInDDoSThreshold": { - "value": "40000" - }, - "PIPVIPAvailabilityAlertSeverity": { - "value": "1" - }, - "PIPVIPAvailabilityWindowSize": { - "value": "PT5M" - }, - "PIPVIPAvailabilityEvaluationFrequency": { - "value": "PT1M" - }, - "PIPVIPAvailabilityPolicyEffect": { - "value": "deployIfNotExists" - }, - "PIPVIPAvailabilityAlertState": { - "value": "true" - }, - "PIPVIPAvailabilityThreshold": { - "value": "1" - }, - "PIPBytesInDDoSAlertSeverity": { - "value": "4" - }, - "PIPBytesInDDoSWindowSize": { - "value": "PT5M" - }, - "PIPBytesInDDoSEvaluationFrequency": { - "value": "PT5M" - }, - "PIPBytesInDDoSPolicyEffect": { - "value": "disabled" - }, - "PIPBytesInDDoSAlertState": { - "value": "true" - }, - "PIPBytesInDDoSThreshold": { - "value": "8000000" - }, - "RVBackupHealthMonitorPolicyEffect": { - "value": "modify" - }, - "VNETDDOSAttackAlertSeverity": { - "value": "1" - }, - "VNETDDOSAttackWindowSize": { - "value": "PT5M" - }, - "VNETDDOSAttackEvaluationFrequency": { - "value": "PT1M" - }, - "VNETDDOSAttackPolicyEffect": { - "value": "deployIfNotExists" - }, - "VNETDDOSAttackAlertState": { - "value": "true" - }, - "VNETDDOSAttackThreshold": { - "value": "1" - }, - "activityNSGDeleteAlertState": { - "value": "true" - }, - "activityUDRUpdateAlertState": { - "value": "true" - }, - "VMHeartBeatRGAlertSeverity": { - "value": "1" - }, - "VMHeartBeatRGWindowSize": { - "value": "PT15M" - }, - "VMHeartBeatRGEvaluationFrequency": { - "value": "PT5M" - }, - "VMHeartBeatRGAutoMitigate": { - "value": "true" - }, - "VMHeartBeatRGAutoResolve": { - "value": "true" - }, - "VMHeartBeatRGAutoResolveTime": { - "value": "00:10:00" - }, - "VMHeartBeatRGPolicyEffect": { - "value": "deployIfNotExists" - }, - "VMHeartBeatRGAlertState": { - "value": "true" - }, - "VMHeartBeatRGThreshold": { - "value": "10" - }, - "VMHeartBeatRGOperator": { - "value": "GreaterThan" - }, - "VMHeartBeatRGTimeAggregation": { - "value": "Average" - }, - "VMNetworkInAlertSeverity": { - "value": "2" - }, - "VMNetworkInWindowSize": { - "value": "PT15M" - }, - "VMNetworkInEvaluationFrequency": { - "value": "PT5M" - }, - "VMNetworkInAutoMitigate": { - "value": "true" - }, - "VMNetworkInAutoResolve": { - "value": "true" - }, - "VMNetworkInAutoResolveTime": { - "value": "00:10:00" - }, - "VMNetworkInPolicyEffect": { - "value": "deployIfNotExists" - }, - "VMNetworkInAlertState": { - "value": "true" - }, - "VMNetworkInThreshold": { - "value": "10000000" - }, - "VMNetworkInOperator": { - "value": "GreaterThan" - }, - "VMNetworkInTimeAggregation": { - "value": "Average" - }, - "VMNetworkInEvaluationPeriods": { - "value": "1" - }, - "VMNetworkInFailingPeriods": { - "value": "1" - }, - "VMNetworkInComputersToInclude": { - "value": [ - "*" - ] - }, - "VMNetworkInNetworkInterfaceToInclude": { - "value": [ - "*" - ] - }, - "VMNetworkOutAlertSeverity": { - "value": "2" - }, - "VMNetworkOutWindowSize": { - "value": "PT15M" - }, - "VMNetworkOutEvaluationFrequency": { - "value": "PT5M" - }, - "VMNetworkOutAutoMitigate": { - "value": "true" - }, - "VMNetworkOutAutoResolve": { - "value": "true" - }, - "VMNetworkOutAutoResolveTime": { - "value": "00:10:00" - }, - "VMNetworkOutPolicyEffect": { - "value": "deployIfNotExists" - }, - "VMNetworkOutAlertState": { - "value": "true" - }, - "VMNetworkOutThreshold": { - "value": "10000000" - }, - "VMNetworkOutOperator": { - "value": "GreaterThan" - }, - "VMNetworkOutTimeAggregation": { - "value": "Average" - }, - "VMNetworkOutEvaluationPeriods": { - "value": "1" - }, - "VMNetworkOutFailingPeriods": { - "value": "1" - }, - "VMNetworkOutComputersToInclude": { - "value": [ - "*" - ] - }, - "VMNetworkOutNetworkInterfaceToInclude": { - "value": [ - "*" - ] - }, - "VMOSDiskReadLatencyAlertSeverity": { - "value": "2" - }, - "VMOSDiskReadLatencyWindowSize": { - "value": "PT15M" - }, - "VMOSDiskReadLatencyEvaluationFrequency": { - "value": "PT5M" - }, - "VMOSDiskReadLatencyAutoMitigate": { - "value": "true" - }, - "VMOSDiskReadLatencyAutoResolve": { - "value": "true" - }, - "VMOSDiskReadLatencyAutoResolveTime": { - "value": "00:10:00" - }, - "VMOSDiskReadLatencyPolicyEffect": { - "value": "deployIfNotExists" - }, - "VMOSDiskReadLatencyAlertState": { - "value": "true" - }, - "VMOSDiskReadLatencyThreshold": { - "value": "30" - }, - "VMOSDiskReadLatencyOperator": { - "value": "LessThan" - }, - "VMOSDiskReadLatencyTimeAggregation": { - "value": "Average" - }, - "VMOSDiskReadLatencyEvaluationPeriods": { - "value": "1" - }, - "VMOSDiskReadLatencyFailingPeriods": { - "value": "1" - }, - "VMOSDiskReadLatencyComputersToInclude": { - "value": [ - "*" - ] - }, - "VMOSDiskReadLatencyDisksToInclude": { - "value": [ - "C:", - "/" - ] - }, - "VMOSDiskWriteLatencyAlertSeverity": { - "value": "2" - }, - "VMOSDiskWriteLatencyWindowSize": { - "value": "PT15M" - }, - "VMOSDiskWriteLatencyEvaluationFrequency": { - "value": "PT5M" - }, - "VMOSDiskWriteLatencyAutoMitigate": { - "value": "true" - }, - "VMOSDiskWriteLatencyAutoResolve": { - "value": "true" - }, - "VMOSDiskWriteLatencyAutoResolveTime": { - "value": "00:10:00" - }, - "VMOSDiskWriteLatencyPolicyEffect": { - "value": "deployIfNotExists" - }, - "VMOSDiskWriteLatencyAlertState": { - "value": "true" - }, - "VMOSDiskWriteLatencyThreshold": { - "value": "50" - }, - "VMOSDiskWriteLatencyOperator": { - "value": "LessThan" - }, - "VMOSDiskWriteLatencyTimeAggregation": { - "value": "Average" - }, - "VMOSDiskWriteLatencyEvaluationPeriods": { - "value": "1" - }, - "VMOSDiskWriteLatencyFailingPeriods": { - "value": "1" - }, - "VMOSDiskWriteLatencyComputersToInclude": { - "value": [ - "*" - ] - }, - "VMOSDiskWriteLatencyDisksToInclude": { - "value": [ - "C:", - "/" - ] - }, - "VMOSDiskSpaceAlertSeverity": { - "value": "2" - }, - "VMOSDiskSpaceWindowSize": { - "value": "PT15M" - }, - "VMOSDiskSpaceEvaluationFrequency": { - "value": "PT5M" - }, - "VMOSDiskSpaceAutoMitigate": { - "value": "true" - }, - "VMOSDiskSpaceAutoResolve": { - "value": "true" - }, - "VMOSDiskSpaceAutoResolveTime": { - "value": "00:10:00" - }, - "VMOSDiskSpacePolicyEffect": { - "value": "deployIfNotExists" - }, - "VMOSDiskSpaceAlertState": { - "value": "true" - }, - "VMOSDiskSpaceThreshold": { - "value": "10" - }, - "VMOSDiskSpaceOperator": { - "value": "LessThan" - }, - "VMOSDiskSpaceTimeAggregation": { - "value": "Average" - }, - "VMOSDiskSpaceEvaluationPeriods": { - "value": "1" - }, - "VMOSDiskSpaceFailingPeriods": { - "value": "1" - }, - "VMOSDiskSpaceComputersToInclude": { - "value": [ - "*" - ] - }, - "VMOSDiskSpaceDisksToInclude": { - "value": [ - "C:", - "/" - ] - }, - "VMPercentCPUAlertSeverity": { - "value": "2" - }, - "VMPercentCPUWindowSize": { - "value": "PT15M" - }, - "VMPercentCPUEvaluationFrequency": { - "value": "PT5M" - }, - "VMPercentCPUAutoMitigate": { - "value": "true" - }, - "VMPercentCPUAutoResolve": { - "value": "true" - }, - "VMPercentCPUAutoResolveTime": { - "value": "00:10:00" - }, - "VMPercentCPUPolicyEffect": { - "value": "deployIfNotExists" - }, - "VMPercentCPUAlertState": { - "value": "true" - }, - "VMPercentCPUThreshold": { - "value": "85" - }, - "VMPercentCPUOperator": { - "value": "GreaterThan" - }, - "VMPercentCPUTimeAggregation": { - "value": "Average" - }, - "VMPercentMemoryAlertSeverity": { - "value": "2" - }, - "VMPercentMemoryWindowSize": { - "value": "PT15M" - }, - "VMPercentMemoryEvaluationFrequency": { - "value": "PT5M" - }, - "VMPercentMemoryAutoMitigate": { - "value": "true" - }, - "VMPercentMemoryAutoResolve": { - "value": "true" - }, - "VMPercentMemoryAutoResolveTime": { - "value": "00:10:00" - }, - "VMPercentMemoryPolicyEffect": { - "value": "deployIfNotExists" - }, - "VMPercentMemoryAlertState": { - "value": "true" - }, - "VMPercentMemoryThreshold": { - "value": "10" - }, - "VMPercentMemoryOperator": { - "value": "LessThan" - }, - "VMPercentMemoryTimeAggregation": { - "value": "Average" - }, - "VMDataDiskSpaceAlertSeverity": { - "value": "2" - }, - "VMDataDiskSpaceWindowSize": { - "value": "PT15M" - }, - "VMDataDiskSpaceEvaluationFrequency": { - "value": "PT5M" - }, - "VMDataDiskSpaceAutoMitigate": { - "value": "true" - }, - "VMDataDiskSpaceAutoResolve": { - "value": "true" - }, - "VMDataDiskSpaceAutoResolveTime": { - "value": "00:10:00" - }, - "VMDataDiskSpacePolicyEffect": { - "value": "deployIfNotExists" - }, - "VMDataDiskSpaceAlertState": { - "value": "true" - }, - "VMDataDiskSpaceThreshold": { - "value": "10" - }, - "VMDataDiskSpaceOperator": { - "value": "LessThan" - }, - "VMDataDiskSpaceTimeAggregation": { - "value": "Average" - }, - "VMDataDiskSpaceEvaluationPeriods": { - "value": "1" - }, - "VMDataDiskSpaceFailingPeriods": { - "value": "1" - }, - "VMDataDiskSpaceDisksToInclude": { - "value": [ - "*" - ] - }, - "VMDataDiskReadLatencyAlertSeverity": { - "value": "2" - }, - "VMDataDiskReadLatencyWindowSize": { - "value": "PT15M" - }, - "VMDataDiskReadLatencyEvaluationFrequency": { - "value": "PT5M" - }, - "VMDataDiskReadLatencyAutoMitigate": { - "value": "true" - }, - "VMDataDiskReadLatencyAutoResolve": { - "value": "true" - }, - "VMDataDiskReadLatencyAutoResolveTime": { - "value": "00:10:00" - }, - "VMDataDiskReadLatencyPolicyEffect": { - "value": "deployIfNotExists" - }, - "VMDataDiskReadLatencyAlertState": { - "value": "true" - }, - "VMDataDiskReadLatencyThreshold": { - "value": "30" - }, - "VMDataDiskReadLatencyOperator": { - "value": "LessThan" - }, - "VMDataDiskReadLatencyTimeAggregation": { - "value": "Average" - }, - "VMDataDiskReadLatencyEvaluationPeriods": { - "value": "1" - }, - "VMDataDiskReadLatencyFailingPeriods": { - "value": "1" - }, - "VMDataDiskReadLatencyComputersToInclude": { - "value": [ - "*" - ] - }, - "VMDataDiskReadLatencyDisksToInclude": { - "value": [ - "*" - ] - }, - "VMDataDiskWriteLatencyAlertSeverity": { - "value": "2" - }, - "VMDataDiskWriteLatencyWindowSize": { - "value": "PT15M" - }, - "VMDataDiskWriteLatencyEvaluationFrequency": { - "value": "PT5M" - }, - "VMDataDiskWriteLatencyAutoMitigate": { - "value": "true" - }, - "VMDataDiskWriteLatencyAutoResolve": { - "value": "true" - }, - "VMDataDiskWriteLatencyAutoResolveTime": { - "value": "00:10:00" - }, - "VMDataDiskWriteLatencyPolicyEffect": { - "value": "deployIfNotExists" - }, - "VMDataDiskWriteLatencyAlertState": { - "value": "true" - }, - "VMDataDiskWriteLatencyThreshold": { - "value": "30" - }, - "VMDataDiskWriteLatencyOperator": { - "value": "LessThan" - }, - "VMDataDiskWriteLatencyTimeAggregation": { - "value": "Average" - }, - "VMDataDiskWriteLatencyEvaluationPeriods": { - "value": "1" - }, - "VMDataDiskWriteLatencyFailingPeriods": { - "value": "1" - }, - "VMDataDiskWriteLatencyComputersToInclude": { - "value": [ - "*" - ] - }, - "VMDataDiskWriteLatencyDisksToInclude": { - "value": [ - "*" - ] - } - } - }, - "policyAssignmentParametersManagement": { - "value": { - "AATotalJobAlertSeverity": { - "value": "2" - }, - "AATotalJobAlertWindowSize": { - "value": "PT5M" - }, - "AATotalJobAlertEvaluationFrequency": { - "value": "PT1M" - }, - "AATotalJobAlertPolicyEffect": { - "value": "deployIfNotExists" - }, - "AATotalJobAlertAlertState": { - "value": "true" - }, - "AATotalJobAlertThreshold": { - "value": "20" - }, - "RVBackupHealthPolicyEffect": { - "value": "modify" - }, - "StorageAccountAvailabilityAlertSeverity": { - "value": "1" - }, - "StorageAccountAvailabilityWindowSize": { - "value": "PT5M" - }, - "StorageAccountAvailabilityFrequency": { - "value": "PT5M" - }, - "StorageAccountAvailabilityPolicyEffect": { - "value": "deployIfNotExists" - }, - "StorageAccountAvailabilityAlertState": { - "value": "true" - }, - "StorageAccountAvailabilityThreshold": { - "value": "90" - }, - "activityLAWDeleteAlertState": { - "value": "true" - }, - "activityLAWKeyRegenAlertState": { - "value": "true" - } - } + "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "enterpriseScaleCompanyPrefix": { + "value": "contoso" + }, + "platformManagementGroup": { + "value": "contoso-platform" + }, + "IdentityManagementGroup": { + "value": "contoso-identity" + }, + "managementManagementGroup": { + "value": "contoso-management" + }, + "connectivityManagementGroup": { + "value": "contoso-connectivity" + }, + "LandingZoneManagementGroup": { + "value": "contoso-landingzone" + }, + "enableAMBAConnectivity": { + "value": "Yes" + }, + "enableAMBAIdentity": { + "value": "Yes" + }, + "enableAMBALandingZone": { + "value": "Yes" + }, + "enableAMBAManagement": { + "value": "Yes" + }, + "enableAMBAServiceHealth": { + "value": "Yes" + }, + "telemetryOptOut": { + "value": "No" + }, + "policyAssignmentParametersCommon": { + "value": { + "ALZMonitorResourceGroupName": { + "value": "rg-alz-monitor" + }, + "ALZMonitorResourceGroupTags": { + "value": { + "Project": "alz-monitor" + } + }, + "ALZMonitorResourceGroupLocation": { + "value": "eastus" + } + } + }, + "policyAssignmentParametersServiceHealth": { + "value": { + "ALZMonitorActionGroupEmail": { + "value": "action@mail.com" + }, + "ResHlthUnhealthyAlertState": { + "value": "true" + }, + "SvcHlthAdvisoryAlertState": { + "value": "true" + }, + "SvcHlthIncidentAlertState": { + "value": "true" + }, + "SvcHlthMaintenanceAlertState": { + "value": "true" + }, + "svcHlthSecAdvisoryAlertState": { + "value": "true" + } + } + }, + "policyAssignmentParametersConnectivity": { + "value": { + "ERCIRQoSDropBitsinPerSecAlertSeverity": { + "value": "2" + }, + "ERCIRQoSDropBitsinPerSecWindowSize": { + "value": "PT5M" + }, + "ERCIRQoSDropBitsinPerSecEvaluationFrequency": { + "value": "PT5M" + }, + "ERCIRQoSDropBitsinPerSecPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERCIRQoSDropBitsinPerSecAlertState": { + "value": "true" + }, + "ERCIRQoSDropBitsoutPerSecAlertSeverity": { + "value": "2" + }, + "ERCIRQoSDropBitsoutPerSecWindowSize": { + "value": "PT5M" + }, + "ERCIRQoSDropBitsoutPerSecEvaluationFrequency": { + "value": "PT5M" + }, + "ERCIRQoSDropBitsoutPerSecPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERCIRQoSDropBitsoutPerSecAlertState": { + "value": "true" + }, + "VPNGwBGPPeerStatusAlertSeverity": { + "value": "3" + }, + "VPNGwBGPPeerStatusWindowSize": { + "value": "PT5M" + }, + "VPNGwBGPPeerStatusEvaluationFrequency": { + "value": "PT5M" + }, + "VPNGwBGPPeerStatusPolicyEffect": { + "value": "deployIfNotExists" + }, + "VPNGwBGPPeerStatusAlertState": { + "value": "true" + }, + "VPNGwBGPPeerStatusThreshold": { + "value": "1" + }, + "VnetGwERCpuUtilAlertSeverity": { + "value": "3" + }, + "VnetGwERCpuUtilWindowSize": { + "value": "PT5M" + }, + "VnetGwERCpuUtilEvaluationFrequency": { + "value": "PT1M" + }, + "VnetGwERCpuUtilPolicyEffect": { + "value": "deployIfNotExists" + }, + "VnetGwERCpuUtilAlertState": { + "value": "true" + }, + "VnetGwERCpuUtilThreshold": { + "value": "80" + }, + "VnetGwTunnelBWAlertSeverity": { + "value": "0" + }, + "VnetGwTunnelBWWindowSize": { + "value": "PT5M" + }, + "VnetGwTunnelBWEvaluationFrequency": { + "value": "PT1M" + }, + "VnetGwTunnelBWPolicyEffect": { + "value": "deployIfNotExists" + }, + "VnetGwTunnelBWAlertState": { + "value": "true" + }, + "VnetGwTunnelBWThreshold": { + "value": "1" + }, + "VnetGwTunnelEgressAlertSeverity": { + "value": "0" + }, + "VnetGwTunnelEgressWindowSize": { + "value": "PT5M" + }, + "VnetGwTunnelEgressEvaluationFrequency": { + "value": "PT5M" + }, + "VnetGwTunnelEgressPolicyEffect": { + "value": "disabled" + }, + "VnetGwTunnelEgressAlertState": { + "value": "true" + }, + "VnetGwTunnelEgressThreshold": { + "value": "1" + }, + "VnetGwTunnelIngressAlertSeverity": { + "value": "0" + }, + "VnetGwTunnelIngressWindowSize": { + "value": "PT5M" + }, + "VnetGwTunnelIngressEvaluationFrequency": { + "value": "PT5M" + }, + "VnetGwTunnelIngressPolicyEffect": { + "value": "disabled" + }, + "VnetGwTunnelIngressAlertState": { + "value": "true" + }, + "VnetGwTunnelIngressThreshold": { + "value": "1" + }, + "VPNGWBandWidthUtilAlertSeverity": { + "value": "0" + }, + "VPNGWBandWidthUtilWindowSize": { + "value": "PT5M" + }, + "VPNGWBandWidthUtilEvaluationFrequency": { + "value": "PT5M" + }, + "VPNGWBandWidthUtilPolicyEffect": { + "value": "deployIfNotExists" + }, + "VPNGWBandWidthUtilAlertState": { + "value": "true" + }, + "VPNGWBandWidthUtilThreshold": { + "value": "1" + }, + "VPNGWEgressAlertSeverity": { + "value": "0" + }, + "VPNGWEgressWindowSize": { + "value": "PT5M" + }, + "VPNGWEgressEvaluationFrequency": { + "value": "PT5M" + }, + "VPNGWEgressPolicyEffect": { + "value": "disabled" + }, + "VPNGWEgressAlertState": { + "value": "true" + }, + "VPNGWEgressThreshold": { + "value": "1" + }, + "VPNGWTunnelEgressPacketDropCountAlertSeverity": { + "value": "3" + }, + "VPNGWTunnelEgressPacketDropCountWindowSize": { + "value": "PT5M" + }, + "VPNGWTunnelEgressPacketDropCountFrequency": { + "value": "PT5M" + }, + "VPNGWTunnelEgressPacketDropCountPolicyEffect": { + "value": "deployIfNotExists" + }, + "VPNGWTunnelEgressPacketDropCountAlertState": { + "value": "true" + }, + "VPNGWTunnelEgressPacketDropMismatchAlertSeverity": { + "value": "3" + }, + "VPNGWTunnelEgressPacketDropMismatchWindowSize": { + "value": "PT5M" + }, + "VPNGWTunnelEgressPacketDropMismatchFrequency": { + "value": "PT5M" + }, + "VPNGWTunnelEgressPacketDropMismatchPolicyEffect": { + "value": "deployIfNotExists" + }, + "VPNGWTunnelEgressPacketDropMismatchAlertState": { + "value": "true" + }, + "VPNGWIngressAlertSeverity": { + "value": "0" + }, + "VPNGWIngressWindowSize": { + "value": "PT5M" + }, + "VPNGWIngressEvaluationFrequency": { + "value": "PT5M" + }, + "VPNGWIngressPolicyEffect": { + "value": "disabled" + }, + "VPNGWIngressAlertState": { + "value": "true" + }, + "VPNGWIngressThreshold": { + "value": "1" + }, + "VPNGWIngressAutoMitigate": { + "value": "true" + }, + "VPNGWTunnelIngressPacketDropCountAlertSeverity": { + "value": "3" + }, + "VPNGWTunnelIngressPacketDropCountWindowSize": { + "value": "PT5M" + }, + "VPNGWTunnelIngressPacketDropCountFrequency": { + "value": "PT5M" + }, + "VPNGWTunnelIngressPacketDropCountPolicyEffect": { + "value": "deployIfNotExists" + }, + "VPNGWTunnelIngressPacketDropCountAlertState": { + "value": "true" + }, + "VPNGWTunnelIngressPacketDropMismatchAlertSeverity": { + "value": "3" + }, + "VPNGWTunnelIngressPacketDropMismatchWindowSize": { + "value": "PT5M" + }, + "VPNGWTunnelIngressPacketDropMismatchFrequency": { + "value": "PT5M" + }, + "VPNGWTunnelIngressPacketDropMismatchPolicyEffect": { + "value": "deployIfNotExists" + }, + "VPNGWTunnelIngressPacketDropMismatchAlertState": { + "value": "true" + }, + "PDNSZCapacityUtilAlertSeverity": { + "value": "2" + }, + "PDNSZCapacityUtilWindowSize": { + "value": "PT1H" + }, + "PDNSZCapacityUtilEvaluationFrequency": { + "value": "PT1H" + }, + "PDNSZCapacityUtilPolicyEffect": { + "value": "deployIfNotExists" + }, + "PDNSZCapacityUtilAlertState": { + "value": "true" + }, + "PDNSZCapacityUtilThreshold": { + "value": "80" + }, + "PDNSZQueryVolumeAlertSeverity": { + "value": "4" + }, + "PDNSZQueryVolumeWindowSize": { + "value": "PT1H" + }, + "PDNSZQueryVolumeEvaluationFrequency": { + "value": "PT1H" + }, + "PDNSZQueryVolumePolicyEffect": { + "value": "disabled" + }, + "PDNSZQueryVolumeAlertState": { + "value": "true" + }, + "PDNSZQueryVolumeThreshold": { + "value": "500" + }, + "PDNSZRecordSetCapacityAlertSeverity": { + "value": "2" + }, + "PDNSZRecordSetCapacityWindowSize": { + "value": "PT1H" + }, + "PDNSZRecordSetCapacityEvaluationFrequency": { + "value": "PT1H" + }, + "PDNSZRecordSetCapacityPolicyEffect": { + "value": "deployIfNotExists" + }, + "PDNSZRecordSetCapacityAlertState": { + "value": "true" + }, + "PDNSZRecordSetCapacityThreshold": { + "value": "80" + }, + "PDNSZRegistrationCapacityUtilAlertSeverity": { + "value": "2" + }, + "PDNSZRegistrationCapacityUtilWindowSize": { + "value": "PT1H" + }, + "PDNSZRegistrationCapacityUtilEvaluationFrequency": { + "value": "PT1H" + }, + "PDNSZRegistrationCapacityUtilPolicyEffect": { + "value": "deployIfNotExists" + }, + "PDNSZRegistrationCapacityUtilAlertState": { + "value": "true" + }, + "PDNSZRegistrationCapacityUtilThreshold": { + "value": "80" + }, + "PIPDDoSAttackAlertSeverity": { + "value": "1" + }, + "PIPDDoSAttackWindowSize": { + "value": "PT5M" + }, + "PIPDDoSAttackEvaluationFrequency": { + "value": "PT5M" + }, + "PIPDDoSAttackPolicyEffect": { + "value": "deployIfNotExists" + }, + "PIPDDoSAttackAlertState": { + "value": "true" + }, + "PIPDDoSAttackThreshold": { + "value": "0" + }, + "PIPPacketsInDDoSAlertSeverity": { + "value": "4" + }, + "PIPPacketsInDDoSWindowSize": { + "value": "PT5M" + }, + "PIPPacketsInDDoSEvaluationFrequency": { + "value": "PT5M" + }, + "PIPPacketsInDDoSPolicyEffect": { + "value": "disabled" + }, + "PIPPacketsInDDoSAlertState": { + "value": "true" + }, + "PIPPacketsInDDoSThreshold": { + "value": "40000" + }, + "PIPVIPAvailabilityAlertSeverity": { + "value": "1" + }, + "PIPVIPAvailabilityWindowSize": { + "value": "PT5M" + }, + "PIPVIPAvailabilityEvaluationFrequency": { + "value": "PT1M" + }, + "PIPVIPAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "PIPVIPAvailabilityAlertState": { + "value": "true" + }, + "PIPVIPAvailabilityThreshold": { + "value": "1" + }, + "PIPBytesInDDoSAlertSeverity": { + "value": "4" + }, + "PIPBytesInDDoSWindowSize": { + "value": "PT5M" + }, + "PIPBytesInDDoSEvaluationFrequency": { + "value": "PT5M" + }, + "PIPBytesInDDoSPolicyEffect": { + "value": "disabled" + }, + "PIPBytesInDDoSAlertState": { + "value": "true" + }, + "PIPBytesInDDoSThreshold": { + "value": "8000000" + }, + "ERGwExpressRouteBitsInAlertSeverity": { + "value": "0" + }, + "ERGwExpressRouteBitsInWindowSize": { + "value": "PT5M" + }, + "ERGwExpressRouteBitsInEvaluationFrequency": { + "value": "PT5M" + }, + "ERGwExpressRouteBitsInPolicyEffect": { + "value": "disabled" + }, + "ERGwExpressRouteBitsInAlertState": { + "value": "true" + }, + "ERGwExpressRouteBitsInThreshold": { + "value": "1" + }, + "ERGwExpressRouteBitsOutAlertSeverity": { + "value": "0" + }, + "ERGwExpressRouteBitsOutWindowSize": { + "value": "PT5M" + }, + "ERGwExpressRouteBitsOutEvaluationFrequency": { + "value": "PT5M" + }, + "ERGwExpressRouteBitsOutPolicyEffect": { + "value": "disabled" + }, + "ERGwExpressRouteBitsOutAlertState": { + "value": "true" + }, + "ERGwExpressRouteBitsOutThreshold": { + "value": "1" + }, + "ERGwExpressRouteCpuUtilAlertSeverity": { + "value": "1" + }, + "ERGwExpressRouteCpuUtilWindowSize": { + "value": "PT5M" + }, + "ERGwExpressRouteCpuUtilEvaluationFrequency": { + "value": "PT1M" + }, + "ERGwExpressRouteCpuUtilPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERGwExpressRouteCpuUtilAlertState": { + "value": "true" + }, + "ERGwExpressRouteCpuUtilThreshold": { + "value": "80" + }, + "VNETDDOSAttackAlertSeverity": { + "value": "1" + }, + "VNETDDOSAttackWindowSize": { + "value": "PT5M" + }, + "VNETDDOSAttackEvaluationFrequency": { + "value": "PT1M" + }, + "VNETDDOSAttackPolicyEffect": { + "value": "deployIfNotExists" + }, + "VNETDDOSAttackAlertState": { + "value": "true" + }, + "VNETDDOSAttackThreshold": { + "value": "1" + }, + "VnetGwTunnelEgressPacketDropCountAlertSeverity": { + "value": "1" + }, + "VnetGwTunnelEgressPacketDropCountWindowSize": { + "value": "PT5M" + }, + "VnetGwTunnelEgressPacketDropCountEvaluationFrequency": { + "value": "PT5M" + }, + "VnetGwTunnelEgressPacketDropCountPolicyEffect": { + "value": "deployIfNotExists" + }, + "VnetGwTunnelEgressPacketDropCountAlertState": { + "value": "true" + }, + "VnetGwTunnelEgressPacketDropMismatchAlertSeverity": { + "value": "3" + }, + "VnetGwTunnelEgressPacketDropMismatchWindowSize": { + "value": "PT5M" + }, + "VnetGwTunnelEgressPacketDropMismatchEvaluationFrequency": { + "value": "PT5M" + }, + "VnetGwTunnelEgressPacketDropMismatchPolicyEffect": { + "value": "deployIfNotExists" + }, + "VnetGwTunnelEgressPacketDropMismatchAlertState": { + "value": "true" + }, + "VnetGwExpressRouteBitsPerSecondAlertSeverity": { + "value": "0" + }, + "VnetGwExpressRouteBitsPerSecondWindowSize": { + "value": "PT5M" + }, + "VnetGwExpressRouteBitsPerSecondEvaluationFrequency": { + "value": "PT1M" + }, + "VnetGwExpressRouteBitsPerSecondPolicyEffect": { + "value": "deployIfNotExists" + }, + "VnetGwExpressRouteBitsPerSecondAlertState": { + "value": "true" + }, + "VnetGwExpressRouteBitsPerSecondThreshold": { + "value": "1" + }, + "VnetGwTunnelIngressPacketDropMismatchAlertSeverity": { + "value": "3" + }, + "VnetGwTunnelIngressPacketDropMismatchWindowSize": { + "value": "PT5M" + }, + "VnetGwTunnelIngressPacketDropMismatchEvaluationFrequency": { + "value": "PT5M" + }, + "VnetGwTunnelIngressPacketDropMismatchPolicyEffect": { + "value": "deployIfNotExists" + }, + "VnetGwTunnelIngressPacketDropMismatchAlertState": { + "value": "true" + }, + "VnetGwTunnelIngressPacketDropCountAlertSeverity": { + "value": "3" + }, + "VnetGwTunnelIngressPacketDropCountWindowSize": { + "value": "PT5M" + }, + "VnetGwTunnelIngressPacketDropCountEvaluationFrequency": { + "value": "PT5M" + }, + "VnetGwTunnelIngressPacketDropCountPolicyEffect": { + "value": "deployIfNotExists" + }, + "VnetGwTunnelIngressPacketDropCountAlertState": { + "value": "true" + }, + "ERCIRBgpAvailabilityAlertSeverity": { + "value": "0" + }, + "ERCIRBgpAvailabilityWindowSize": { + "value": "PT5M" + }, + "ERCIRBgpAvailabilityEvaluationFrequency": { + "value": "PT1M" + }, + "ERCIRBgpAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERCIRBgpAvailabilityAlertState": { + "value": "true" + }, + "ERCIRBgpAvailabilityThreshold": { + "value": "90" + }, + "ERCIRArpAvailabilityAlertSeverity": { + "value": "0" + }, + "ERCIRArpAvailabilityWindowSize": { + "value": "PT5M" + }, + "ERCIRArpAvailabilityFrequency": { + "value": "PT1M" + }, + "ERCIRArpAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERCIRArpAvailabilityAlertState": { + "value": "true" + }, + "ERCIRArpAvailabilityThreshold": { + "value": "90" + }, + "AFWSNATPortUtilizationAlertSeverity": { + "value": "1" + }, + "AFWSNATPortUtilizationWindowSize": { + "value": "PT5M" + }, + "AFWSNATPortUtilizationFrequency": { + "value": "PT1M" + }, + "AFWSNATPortUtilizationPolicyEffect": { + "value": "deployIfNotExists" + }, + "AFWSNATPortUtilizationAlertState": { + "value": "true" + }, + "AFWSNATPortUtilizationThreshold": { + "value": "80" + }, + "FirewallHealthAlertSeverity": { + "value": "0" + }, + "FirewallHealthWindowSize": { + "value": "PT5M" + }, + "FirewallHealthEvaluationFrequency": { + "value": "PT1M" + }, + "FirewallHealthPolicyEffect": { + "value": "deployIfNotExists" + }, + "FirewallHealthAlertState": { + "value": "true" + }, + "FirewallHealthThreshold": { + "value": "90" + }, + "activityFWDeleteAlertState": { + "value": "true" + }, + "activityNSGDeleteAlertState": { + "value": "true" + }, + "activityUDRUpdateAlertState": { + "value": "true" + }, + "activityVPNGWDeleteAlertState": { + "value": "true" + }, + "LBDatapathAvailabilityAlertSeverity": { + "value": "0" + }, + "LBDatapathAvailabilityWindowSize": { + "value": "PT5M" + }, + "LBDatapathAvailabilityEvaluationFrequency": { + "value": "PT1M" + }, + "LBDatapathAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "LBDatapathAvailabilityAlertState": { + "value": "true" + }, + "LBGlobalBackendAvailabilityAlertSeverity": { + "value": "0" + }, + "LBGlobalBackendAvailabilityWindowSize": { + "value": "PT5M" + }, + "LBGlobalBackendAvailabilityEvaluationFrequency": { + "value": "PT1M" + }, + "LBGlobalBackendAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "LBGlobalBackendAvailabilityAlertState": { + "value": "true" + }, + "LBHealthProbeStatusAlertSeverity": { + "value": "2" + }, + "LBHealthProbeStatusWindowSize": { + "value": "PT5M" + }, + "LBHealthProbeStatusEvaluationFrequency": { + "value": "PT1M" + }, + "LBHealthProbeStatusPolicyEffect": { + "value": "deployIfNotExists" + }, + "LBHealthProbeStatusAlertState": { + "value": "true" + }, + "LBUsedSNATPortsAlertSeverity": { + "value": "1" + }, + "LBUsedSNATPortsWindowSize": { + "value": "PT5M" + }, + "LBUsedSNATPortsEvaluationFrequency": { + "value": "PT1M" + }, + "LBUsedSNATPortsPolicyEffect": { + "value": "deployIfNotExists" + }, + "LBUsedSNATPortsAlertState": { + "value": "true" + }, + "ERPBitsInPerSecondAlertSeverity": { + "value": "0" + }, + "ERPBitsInPerSecondWindowSize": { + "value": "PT5M" + }, + "ERPBitsInPerSecondEvaluationFrequency": { + "value": "PT1M" + }, + "ERPBitsInPerSecondPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERPBitsInPerSecondAlertState": { + "value": "true" + }, + "ERPBitsOutPerSecondAlertSeverity": { + "value": "0" + }, + "ERPBitsOutPerSecondWindowSize": { + "value": "PT5M" + }, + "ERPBitsOutPerSecondEvaluationFrequency": { + "value": "PT1M" + }, + "ERPBitsOutPerSecondPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERPBitsOutPerSecondAlertState": { + "value": "true" + }, + "ERPLineProtocolAlertSeverity": { + "value": "0" + }, + "ERPLineProtocolWindowSize": { + "value": "PT5M" + }, + "ERPLineProtocolEvaluationFrequency": { + "value": "PT1M" + }, + "ERPLineProtocolPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERPLineProtocolAlertState": { + "value": "true" + }, + "ERPRxLightLevelHighAlertSeverity": { + "value": "1" + }, + "ERPRxLightLevelHighWindowSize": { + "value": "PT5M" + }, + "ERPRxLightLevelHighEvaluationFrequency": { + "value": "PT1M" + }, + "ERPRxLightLevelHighPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERPRxLightLevelHighAlertState": { + "value": "true" + }, + "ERPRxLightLevelLowAlertSeverity": { + "value": "1" + }, + "ERPRxLightLevelLowWindowSize": { + "value": "PT5M" + }, + "ERPRxLightLevelLowEvaluationFrequency": { + "value": "PT1M" + }, + "ERPRxLightLevelLowPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERPRxLightLevelLowAlertState": { + "value": "true" + }, + "ERPTxLightLevelHighAlertSeverity": { + "value": "1" + }, + "ERPTxLightLevelHighWindowSize": { + "value": "PT5M" + }, + "ERPTxLightLevelHighEvaluationFrequency": { + "value": "PT1M" + }, + "ERPTxLightLevelHighPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERPTxLightLevelHighAlertState": { + "value": "true" + }, + "ERPTxLightLevelLowAlertSeverity": { + "value": "1" + }, + "ERPTxLightLevelLowWindowSize": { + "value": "PT5M" + }, + "ERPTxLightLevelLowEvaluationFrequency": { + "value": "PT1M" + }, + "ERPTxLightLevelLowPolicyEffect": { + "value": "deployIfNotExists" + }, + "ERPTxLightLevelLowAlertState": { + "value": "true" + } + } + }, + "policyAssignmentParametersIdentity": { + "value": { + "KVRequestAlertSeverity": { + "value": "2" + }, + "KVRequestWindowSize": { + "value": "PT5M" + }, + "KVRequestEvaluationFrequency": { + "value": "PT5M" + }, + "KVRequestPolicyEffect": { + "value": "disabled" + }, + "KVRequestAlertState": { + "value": "true" + }, + "KvAvailabilityAlertSeverity": { + "value": "1" + }, + "KvAvailabilityWindowSize": { + "value": "PT1M" + }, + "KvAvailabilityEvaluationFrequency": { + "value": "PT1M" + }, + "KvAvailabilityPolicyEffect": { + "value": "disabled" + }, + "KvAvailabilityAlertState": { + "value": "true" + }, + "KVAvailabilityThreshold": { + "value": "20" + }, + "KvLatencyAvailabilityAlertSeverity": { + "value": "3" + }, + "KvLatencyAvailabilityWindowSize": { + "value": "PT5M" + }, + "KvLatencyAvailabilityEvaluationFrequency": { + "value": "PT5M" + }, + "KvLatencyAvailabilityPolicyEffect": { + "value": "disabled" + }, + "KvLatencyAvailabilityAlertState": { + "value": "true" + }, + "KvLatencyAvailabilityThreshold": { + "value": "1000" + }, + "KVCapacityAlertSeverity": { + "value": "1" + }, + "KVCapacityWindowSize": { + "value": "PT5M" + }, + "KVCapacityEvaluationFrequency": { + "value": "PT1M" + }, + "KVCapacityPolicyEffect": { + "value": "disabled" + }, + "KVCapacityAlertState": { + "value": "true" + }, + "KVCapacityThreshold": { + "value": "75" + }, + "activityKVDeleteAlertState": { + "value": "true" + } + } + }, + "policyAssignmentParametersLandingZone": { + "value": { + "KVRequestAlertSeverity": { + "value": "2" + }, + "KVRequestWindowSize": { + "value": "PT5M" + }, + "KVRequestEvaluationFrequency": { + "value": "PT5M" + }, + "KVRequestPolicyEffect": { + "value": "disabled" + }, + "KVRequestAlertState": { + "value": "true" + }, + "KvAvailabilityAlertSeverity": { + "value": "1" + }, + "KvAvailabilityWindowSize": { + "value": "PT1M" + }, + "KvAvailabilityEvaluationFrequency": { + "value": "PT1M" + }, + "KvAvailabilityPolicyEffect": { + "value": "disabled" + }, + "KvAvailabilityAlertState": { + "value": "true" + }, + "KVAvailabilityThreshold": { + "value": "20" + }, + "KvLatencyAvailabilityAlertSeverity": { + "value": "3" + }, + "KvLatencyAvailabilityWindowSize": { + "value": "PT5M" + }, + "KvLatencyAvailabilityEvaluationFrequency": { + "value": "PT5M" + }, + "KvLatencyAvailabilityPolicyEffect": { + "value": "disabled" + }, + "KvLatencyAvailabilityAlertState": { + "value": "true" + }, + "KvLatencyAvailabilityThreshold": { + "value": "1000" + }, + "KVCapacityAlertSeverity": { + "value": "1" + }, + "KVCapacityWindowSize": { + "value": "PT5M" + }, + "KVCapacityEvaluationFrequency": { + "value": "PT1M" + }, + "KVCapacityPolicyEffect": { + "value": "disabled" + }, + "KVCapacityAlertState": { + "value": "true" + }, + "KVCapacityThreshold": { + "value": "75" + }, + "activityKVDeleteAlertState": { + "value": "true" + }, + "StorageAccountAvailabilityAlertSeverity": { + "value": "1" + }, + "StorageAccountAvailabilityWindowSize": { + "value": "PT5M" + }, + "StorageAccountAvailabilityFrequency": { + "value": "PT5M" + }, + "StorageAccountAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "StorageAccountAvailabilityAlertState": { + "value": "true" + }, + "StorageAccountAvailabilityThreshold": { + "value": "90" + }, + "PIPDDoSAttackAlertSeverity": { + "value": "1" + }, + "PIPDDoSAttackWindowSize": { + "value": "PT5M" + }, + "PIPDDoSAttackEvaluationFrequency": { + "value": "PT5M" + }, + "PIPDDoSAttackPolicyEffect": { + "value": "deployIfNotExists" + }, + "PIPDDoSAttackAlertState": { + "value": "true" + }, + "PIPDDoSAttackThreshold": { + "value": "0" + }, + "PIPPacketsInDDoSAlertSeverity": { + "value": "4" + }, + "PIPPacketsInDDoSWindowSize": { + "value": "PT5M" + }, + "PIPPacketsInDDoSEvaluationFrequency": { + "value": "PT5M" + }, + "PIPPacketsInDDoSPolicyEffect": { + "value": "disabled" + }, + "PIPPacketsInDDoSAlertState": { + "value": "true" + }, + "PIPPacketsInDDoSThreshold": { + "value": "40000" + }, + "PIPVIPAvailabilityAlertSeverity": { + "value": "1" + }, + "PIPVIPAvailabilityWindowSize": { + "value": "PT5M" + }, + "PIPVIPAvailabilityEvaluationFrequency": { + "value": "PT1M" + }, + "PIPVIPAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "PIPVIPAvailabilityAlertState": { + "value": "true" + }, + "PIPVIPAvailabilityThreshold": { + "value": "1" + }, + "PIPBytesInDDoSAlertSeverity": { + "value": "4" + }, + "PIPBytesInDDoSWindowSize": { + "value": "PT5M" + }, + "PIPBytesInDDoSEvaluationFrequency": { + "value": "PT5M" + }, + "PIPBytesInDDoSPolicyEffect": { + "value": "disabled" + }, + "PIPBytesInDDoSAlertState": { + "value": "true" + }, + "PIPBytesInDDoSThreshold": { + "value": "8000000" + }, + "RVBackupHealthMonitorPolicyEffect": { + "value": "modify" + }, + "VNETDDOSAttackAlertSeverity": { + "value": "1" + }, + "VNETDDOSAttackWindowSize": { + "value": "PT5M" + }, + "VNETDDOSAttackEvaluationFrequency": { + "value": "PT1M" + }, + "VNETDDOSAttackPolicyEffect": { + "value": "deployIfNotExists" + }, + "VNETDDOSAttackAlertState": { + "value": "true" + }, + "VNETDDOSAttackThreshold": { + "value": "1" + }, + "activityNSGDeleteAlertState": { + "value": "true" + }, + "activityUDRUpdateAlertState": { + "value": "true" + }, + "VMHeartBeatRGAlertSeverity": { + "value": "1" + }, + "VMHeartBeatRGWindowSize": { + "value": "PT15M" + }, + "VMHeartBeatRGEvaluationFrequency": { + "value": "PT5M" + }, + "VMHeartBeatRGAutoMitigate": { + "value": "true" + }, + "VMHeartBeatRGAutoResolve": { + "value": "true" + }, + "VMHeartBeatRGAutoResolveTime": { + "value": "00:10:00" + }, + "VMHeartBeatRGPolicyEffect": { + "value": "deployIfNotExists" + }, + "VMHeartBeatRGAlertState": { + "value": "true" + }, + "VMHeartBeatRGThreshold": { + "value": "10" + }, + "VMHeartBeatRGOperator": { + "value": "GreaterThan" + }, + "VMHeartBeatRGTimeAggregation": { + "value": "Average" + }, + "VMNetworkInAlertSeverity": { + "value": "2" + }, + "VMNetworkInWindowSize": { + "value": "PT15M" + }, + "VMNetworkInEvaluationFrequency": { + "value": "PT5M" + }, + "VMNetworkInAutoMitigate": { + "value": "true" + }, + "VMNetworkInAutoResolve": { + "value": "true" + }, + "VMNetworkInAutoResolveTime": { + "value": "00:10:00" + }, + "VMNetworkInPolicyEffect": { + "value": "deployIfNotExists" + }, + "VMNetworkInAlertState": { + "value": "true" + }, + "VMNetworkInThreshold": { + "value": "10000000" + }, + "VMNetworkInOperator": { + "value": "GreaterThan" + }, + "VMNetworkInTimeAggregation": { + "value": "Average" + }, + "VMNetworkInEvaluationPeriods": { + "value": "1" + }, + "VMNetworkInFailingPeriods": { + "value": "1" + }, + "VMNetworkInComputersToInclude": { + "value": ["*"] + }, + "VMNetworkInNetworkInterfaceToInclude": { + "value": ["*"] + }, + "VMNetworkOutAlertSeverity": { + "value": "2" + }, + "VMNetworkOutWindowSize": { + "value": "PT15M" + }, + "VMNetworkOutEvaluationFrequency": { + "value": "PT5M" + }, + "VMNetworkOutAutoMitigate": { + "value": "true" + }, + "VMNetworkOutAutoResolve": { + "value": "true" + }, + "VMNetworkOutAutoResolveTime": { + "value": "00:10:00" + }, + "VMNetworkOutPolicyEffect": { + "value": "deployIfNotExists" + }, + "VMNetworkOutAlertState": { + "value": "true" + }, + "VMNetworkOutThreshold": { + "value": "10000000" + }, + "VMNetworkOutOperator": { + "value": "GreaterThan" + }, + "VMNetworkOutTimeAggregation": { + "value": "Average" + }, + "VMNetworkOutEvaluationPeriods": { + "value": "1" + }, + "VMNetworkOutFailingPeriods": { + "value": "1" + }, + "VMNetworkOutComputersToInclude": { + "value": ["*"] + }, + "VMNetworkOutNetworkInterfaceToInclude": { + "value": ["*"] + }, + "VMOSDiskReadLatencyAlertSeverity": { + "value": "2" + }, + "VMOSDiskReadLatencyWindowSize": { + "value": "PT15M" + }, + "VMOSDiskReadLatencyEvaluationFrequency": { + "value": "PT5M" + }, + "VMOSDiskReadLatencyAutoMitigate": { + "value": "true" + }, + "VMOSDiskReadLatencyAutoResolve": { + "value": "true" + }, + "VMOSDiskReadLatencyAutoResolveTime": { + "value": "00:10:00" + }, + "VMOSDiskReadLatencyPolicyEffect": { + "value": "deployIfNotExists" + }, + "VMOSDiskReadLatencyAlertState": { + "value": "true" + }, + "VMOSDiskReadLatencyThreshold": { + "value": "30" + }, + "VMOSDiskReadLatencyOperator": { + "value": "LessThan" + }, + "VMOSDiskReadLatencyTimeAggregation": { + "value": "Average" + }, + "VMOSDiskReadLatencyEvaluationPeriods": { + "value": "1" + }, + "VMOSDiskReadLatencyFailingPeriods": { + "value": "1" + }, + "VMOSDiskReadLatencyComputersToInclude": { + "value": ["*"] + }, + "VMOSDiskReadLatencyDisksToInclude": { + "value": ["C:", "/"] + }, + "VMOSDiskWriteLatencyAlertSeverity": { + "value": "2" + }, + "VMOSDiskWriteLatencyWindowSize": { + "value": "PT15M" + }, + "VMOSDiskWriteLatencyEvaluationFrequency": { + "value": "PT5M" + }, + "VMOSDiskWriteLatencyAutoMitigate": { + "value": "true" + }, + "VMOSDiskWriteLatencyAutoResolve": { + "value": "true" + }, + "VMOSDiskWriteLatencyAutoResolveTime": { + "value": "00:10:00" + }, + "VMOSDiskWriteLatencyPolicyEffect": { + "value": "deployIfNotExists" + }, + "VMOSDiskWriteLatencyAlertState": { + "value": "true" + }, + "VMOSDiskWriteLatencyThreshold": { + "value": "50" + }, + "VMOSDiskWriteLatencyOperator": { + "value": "LessThan" + }, + "VMOSDiskWriteLatencyTimeAggregation": { + "value": "Average" + }, + "VMOSDiskWriteLatencyEvaluationPeriods": { + "value": "1" + }, + "VMOSDiskWriteLatencyFailingPeriods": { + "value": "1" + }, + "VMOSDiskWriteLatencyComputersToInclude": { + "value": ["*"] + }, + "VMOSDiskWriteLatencyDisksToInclude": { + "value": ["C:", "/"] + }, + "VMOSDiskSpaceAlertSeverity": { + "value": "2" + }, + "VMOSDiskSpaceWindowSize": { + "value": "PT15M" + }, + "VMOSDiskSpaceEvaluationFrequency": { + "value": "PT5M" + }, + "VMOSDiskSpaceAutoMitigate": { + "value": "true" + }, + "VMOSDiskSpaceAutoResolve": { + "value": "true" + }, + "VMOSDiskSpaceAutoResolveTime": { + "value": "00:10:00" + }, + "VMOSDiskSpacePolicyEffect": { + "value": "deployIfNotExists" + }, + "VMOSDiskSpaceAlertState": { + "value": "true" + }, + "VMOSDiskSpaceThreshold": { + "value": "10" + }, + "VMOSDiskSpaceOperator": { + "value": "LessThan" + }, + "VMOSDiskSpaceTimeAggregation": { + "value": "Average" + }, + "VMOSDiskSpaceEvaluationPeriods": { + "value": "1" + }, + "VMOSDiskSpaceFailingPeriods": { + "value": "1" + }, + "VMOSDiskSpaceComputersToInclude": { + "value": ["*"] + }, + "VMOSDiskSpaceDisksToInclude": { + "value": ["C:", "/"] + }, + "VMPercentCPUAlertSeverity": { + "value": "2" + }, + "VMPercentCPUWindowSize": { + "value": "PT15M" + }, + "VMPercentCPUEvaluationFrequency": { + "value": "PT5M" + }, + "VMPercentCPUAutoMitigate": { + "value": "true" + }, + "VMPercentCPUAutoResolve": { + "value": "true" + }, + "VMPercentCPUAutoResolveTime": { + "value": "00:10:00" + }, + "VMPercentCPUPolicyEffect": { + "value": "deployIfNotExists" + }, + "VMPercentCPUAlertState": { + "value": "true" + }, + "VMPercentCPUThreshold": { + "value": "85" + }, + "VMPercentCPUOperator": { + "value": "GreaterThan" + }, + "VMPercentCPUTimeAggregation": { + "value": "Average" + }, + "VMPercentMemoryAlertSeverity": { + "value": "2" + }, + "VMPercentMemoryWindowSize": { + "value": "PT15M" + }, + "VMPercentMemoryEvaluationFrequency": { + "value": "PT5M" + }, + "VMPercentMemoryAutoMitigate": { + "value": "true" + }, + "VMPercentMemoryAutoResolve": { + "value": "true" + }, + "VMPercentMemoryAutoResolveTime": { + "value": "00:10:00" + }, + "VMPercentMemoryPolicyEffect": { + "value": "deployIfNotExists" + }, + "VMPercentMemoryAlertState": { + "value": "true" + }, + "VMPercentMemoryThreshold": { + "value": "10" + }, + "VMPercentMemoryOperator": { + "value": "LessThan" + }, + "VMPercentMemoryTimeAggregation": { + "value": "Average" + }, + "VMDataDiskSpaceAlertSeverity": { + "value": "2" + }, + "VMDataDiskSpaceWindowSize": { + "value": "PT15M" + }, + "VMDataDiskSpaceEvaluationFrequency": { + "value": "PT5M" + }, + "VMDataDiskSpaceAutoMitigate": { + "value": "true" + }, + "VMDataDiskSpaceAutoResolve": { + "value": "true" + }, + "VMDataDiskSpaceAutoResolveTime": { + "value": "00:10:00" + }, + "VMDataDiskSpacePolicyEffect": { + "value": "deployIfNotExists" + }, + "VMDataDiskSpaceAlertState": { + "value": "true" + }, + "VMDataDiskSpaceThreshold": { + "value": "10" + }, + "VMDataDiskSpaceOperator": { + "value": "LessThan" + }, + "VMDataDiskSpaceTimeAggregation": { + "value": "Average" + }, + "VMDataDiskSpaceEvaluationPeriods": { + "value": "1" + }, + "VMDataDiskSpaceFailingPeriods": { + "value": "1" + }, + "VMDataDiskSpaceDisksToInclude": { + "value": ["*"] + }, + "VMDataDiskReadLatencyAlertSeverity": { + "value": "2" + }, + "VMDataDiskReadLatencyWindowSize": { + "value": "PT15M" + }, + "VMDataDiskReadLatencyEvaluationFrequency": { + "value": "PT5M" + }, + "VMDataDiskReadLatencyAutoMitigate": { + "value": "true" + }, + "VMDataDiskReadLatencyAutoResolve": { + "value": "true" + }, + "VMDataDiskReadLatencyAutoResolveTime": { + "value": "00:10:00" + }, + "VMDataDiskReadLatencyPolicyEffect": { + "value": "deployIfNotExists" + }, + "VMDataDiskReadLatencyAlertState": { + "value": "true" + }, + "VMDataDiskReadLatencyThreshold": { + "value": "30" + }, + "VMDataDiskReadLatencyOperator": { + "value": "LessThan" + }, + "VMDataDiskReadLatencyTimeAggregation": { + "value": "Average" + }, + "VMDataDiskReadLatencyEvaluationPeriods": { + "value": "1" + }, + "VMDataDiskReadLatencyFailingPeriods": { + "value": "1" + }, + "VMDataDiskReadLatencyComputersToInclude": { + "value": ["*"] + }, + "VMDataDiskReadLatencyDisksToInclude": { + "value": ["*"] + }, + "VMDataDiskWriteLatencyAlertSeverity": { + "value": "2" + }, + "VMDataDiskWriteLatencyWindowSize": { + "value": "PT15M" + }, + "VMDataDiskWriteLatencyEvaluationFrequency": { + "value": "PT5M" + }, + "VMDataDiskWriteLatencyAutoMitigate": { + "value": "true" + }, + "VMDataDiskWriteLatencyAutoResolve": { + "value": "true" + }, + "VMDataDiskWriteLatencyAutoResolveTime": { + "value": "00:10:00" + }, + "VMDataDiskWriteLatencyPolicyEffect": { + "value": "deployIfNotExists" + }, + "VMDataDiskWriteLatencyAlertState": { + "value": "true" + }, + "VMDataDiskWriteLatencyThreshold": { + "value": "30" + }, + "VMDataDiskWriteLatencyOperator": { + "value": "LessThan" + }, + "VMDataDiskWriteLatencyTimeAggregation": { + "value": "Average" + }, + "VMDataDiskWriteLatencyEvaluationPeriods": { + "value": "1" + }, + "VMDataDiskWriteLatencyFailingPeriods": { + "value": "1" + }, + "VMDataDiskWriteLatencyComputersToInclude": { + "value": ["*"] + }, + "VMDataDiskWriteLatencyDisksToInclude": { + "value": ["*"] + }, + "AGWApplicationGatewayTotalTimeAlertSeverity": { + "value": "2" + }, + "AGWApplicationGatewayTotalTimeWindowSize": { + "value": "PT5M" + }, + "AGWApplicationGatewayTotalTimeEvaluationFrequency": { + "value": "PT1M" + }, + "AGWApplicationGatewayTotalTimePolicyEffect": { + "value": "deployIfNotExists" + }, + "AGWApplicationGatewayTotalTimeAlertState": { + "value": "true" + }, + "AGWBackendLastByteResponseTimeAlertSeverity": { + "value": "2" + }, + "AGWBackendLastByteResponseTimeWindowSize": { + "value": "PT5M" + }, + "AGWBackendLastByteResponseTimeEvaluationFrequency": { + "value": "PT1M" + }, + "AGWBackendLastByteResponseTimePolicyEffect": { + "value": "deployIfNotExists" + }, + "AGWBackendLastByteResponseTimeAlertState": { + "value": "true" + }, + "AGWCapacityUnitsAlertSeverity": { + "value": "2" + }, + "AGWCapacityUnitsWindowSize": { + "value": "PT5M" + }, + "AGWCapacityUnitsEvaluationFrequency": { + "value": "PT1M" + }, + "AGWCapacityUnitsPolicyEffect": { + "value": "deployIfNotExists" + }, + "AGWCapacityUnitsAlertState": { + "value": "true" + }, + "AGWComputeUnitsAlertSeverity": { + "value": "2" + }, + "AGWComputeUnitsWindowSize": { + "value": "PT5M" + }, + "AGWComputeUnitsEvaluationFrequency": { + "value": "PT1M" + }, + "AGWComputeUnitsPolicyEffect": { + "value": "deployIfNotExists" + }, + "AGWComputeUnitsAlertState": { + "value": "true" + }, + "AGWCPUUtilAlertSeverity": { + "value": "2" + }, + "AGWCPUUtilWindowSize": { + "value": "PT5M" + }, + "AGWCPUUtilEvaluationFrequency": { + "value": "PT1M" + }, + "AGWCPUUtilPolicyEffect": { + "value": "deployIfNotExists" + }, + "AGWCPUUtilAlertState": { + "value": "true" + }, + "AGWFailedRequestsAlertSeverity": { + "value": "2" + }, + "AGWFailedRequestsWindowSize": { + "value": "PT5M" + }, + "AGWFailedRequestsEvaluationFrequency": { + "value": "PT1M" + }, + "AGWFailedRequestsPolicyEffect": { + "value": "deployIfNotExists" + }, + "AGWFailedRequestsAlertState": { + "value": "true" + }, + "AGWResponseStatusAlertSeverity": { + "value": "2" + }, + "AGWResponseStatusWindowSize": { + "value": "PT5M" + }, + "AGWResponseStatusEvaluationFrequency": { + "value": "PT1M" + }, + "AGWResponseStatusPolicyEffect": { + "value": "deployIfNotExists" + }, + "AGWResponseStatusAlertState": { + "value": "true" + }, + "AGWUnhealthyHostCountAlertSeverity": { + "value": "2" + }, + "AGWUnhealthyHostCountWindowSize": { + "value": "PT5M" + }, + "AGWUnhealthyHostCountEvaluationFrequency": { + "value": "PT1M" + }, + "AGWUnhealthyHostCountPolicyEffect": { + "value": "deployIfNotExists" + }, + "AGWUnhealthyHostCountAlertState": { + "value": "true" + }, + "LBDatapathAvailabilityAlertSeverity": { + "value": "0" + }, + "LBDatapathAvailabilityWindowSize": { + "value": "PT5M" + }, + "LBDatapathAvailabilityEvaluationFrequency": { + "value": "PT1M" + }, + "LBDatapathAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "LBDatapathAvailabilityAlertState": { + "value": "true" + }, + "LBGlobalBackendAvailabilityAlertSeverity": { + "value": "0" + }, + "LBGlobalBackendAvailabilityWindowSize": { + "value": "PT5M" + }, + "LBGlobalBackendAvailabilityEvaluationFrequency": { + "value": "PT1M" + }, + "LBGlobalBackendAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "LBGlobalBackendAvailabilityAlertState": { + "value": "true" + }, + "LBHealthProbeStatusAlertSeverity": { + "value": "2" + }, + "LBHealthProbeStatusWindowSize": { + "value": "PT5M" + }, + "LBHealthProbeStatusEvaluationFrequency": { + "value": "PT1M" + }, + "LBHealthProbeStatusPolicyEffect": { + "value": "deployIfNotExists" + }, + "LBHealthProbeStatusAlertState": { + "value": "true" + }, + "LBUsedSNATPortsAlertSeverity": { + "value": "1" + }, + "LBUsedSNATPortsWindowSize": { + "value": "PT5M" + }, + "LBUsedSNATPortsEvaluationFrequency": { + "value": "PT1M" + }, + "LBUsedSNATPortsPolicyEffect": { + "value": "deployIfNotExists" + }, + "LBUsedSNATPortsAlertState": { + "value": "true" + } + } + }, + "policyAssignmentParametersManagement": { + "value": { + "AATotalJobAlertSeverity": { + "value": "2" + }, + "AATotalJobAlertWindowSize": { + "value": "PT5M" + }, + "AATotalJobAlertEvaluationFrequency": { + "value": "PT1M" + }, + "AATotalJobAlertPolicyEffect": { + "value": "deployIfNotExists" + }, + "AATotalJobAlertAlertState": { + "value": "true" + }, + "AATotalJobAlertThreshold": { + "value": "20" + }, + "RVBackupHealthPolicyEffect": { + "value": "modify" + }, + "StorageAccountAvailabilityAlertSeverity": { + "value": "1" + }, + "StorageAccountAvailabilityWindowSize": { + "value": "PT5M" + }, + "StorageAccountAvailabilityFrequency": { + "value": "PT5M" + }, + "StorageAccountAvailabilityPolicyEffect": { + "value": "deployIfNotExists" + }, + "StorageAccountAvailabilityAlertState": { + "value": "true" + }, + "StorageAccountAvailabilityThreshold": { + "value": "90" + }, + "activityLAWDeleteAlertState": { + "value": "true" + }, + "activityLAWKeyRegenAlertState": { + "value": "true" } + } } + } } diff --git a/patterns/alz/examples/sample-pipeline.yml b/patterns/alz/examples/sample-pipeline.yml new file mode 100644 index 000000000..9e0cf58fb --- /dev/null +++ b/patterns/alz/examples/sample-pipeline.yml @@ -0,0 +1,17 @@ +variables: + location: "norwayeast" + ManagementGroupPrefix: "alz" + serviceConnectionName: "AMBA-Service-Connection" + +pool: + vmImage: ubuntu-latest + +steps: + - task: AzureCLI@2 + displayName: "Deploy AMBA ARM template" + inputs: + azureSubscription: ${{ variables['serviceConnectionName'] }} + scriptType: bash + scriptLocation: inlineScript + inlineScript: | + az deployment mg create --template-uri https://raw.githubusercontent.com/Azure/azure-monitor-baseline-alerts/main/patterns/alz/alzArm.json --location $(location) --management-group-id $(ManagementGroupPrefix) --parameters .\patterns\alz\alzArm.param.json diff --git a/patterns/alz/examples/sample-workflow.yml b/patterns/alz/examples/sample-workflow.yml new file mode 100644 index 000000000..645914f25 --- /dev/null +++ b/patterns/alz/examples/sample-workflow.yml @@ -0,0 +1,37 @@ +name: Deploy AMBA + +on: + workflow_dispatch: {} + +permissions: + id-token: write + contents: read + +env: + Location: "norwayeast" + ManagementGroupPrefix: "alz" + +jobs: + deploy_job: + runs-on: ubuntu-latest + environment: deploy + + steps: + - name: Checkout Repo + uses: actions/checkout@v2 + with: + fetch-depth: 0 + + - name: "Az CLI login" + uses: azure/login@v1 + with: + client-id: ${{ secrets.AZURE_CLIENT_ID }} + tenant-id: ${{ secrets.AZURE_TENANT_ID }} + subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} + enable-AzPSSession: true + + - name: Az CLI Deploy AMBA ARM template + id: deploy_amba + shell: bash + run: | + az deployment mg create --template-uri https://raw.githubusercontent.com/Azure/azure-monitor-baseline-alerts/main/patterns/alz/alzArm.json --location ${{ env.Location }} --management-group-id ${{ env.ManagementGroupPrefix }} --parameters .\patterns\alz\alzArm.param.json diff --git a/patterns/alz/policyDefinitions/policies.json b/patterns/alz/policyDefinitions/policies.json index d9405f196..10dad3865 100644 --- a/patterns/alz/policyDefinitions/policies.json +++ b/patterns/alz/policyDefinitions/policies.json @@ -5,7 +5,7 @@ "_generator": { "name": "bicep", "version": "0.18.4.5664", - "templateHash": "6035152499569453451" + "templateHash": "7287743075919095659" } }, "parameters": { @@ -147,17 +147,17 @@ "$fxv#34": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_PublicIp_VIPAvailability_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy PIP VIP Availability Alert\",\r\n \"description\": \"Policy to audit/deploy PIP VIP Availability Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Network\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"90\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/publicIPAddresses\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/publicIPAddresses\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"VipAvailability\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/publicIPAddresses/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-VIPAvailabityAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for Public IP Address VIP Availability\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[parameters('resourceId')]\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"VipAvailability\",\r\n \"metricNamespace\": \"Microsoft.Network/publicIPAddresses\",\r\n \"metricName\": \"VipAvailability\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#35": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_StorageAccount_Availability_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy SA Availability Alert\",\r\n \"description\": \"Policy to audit/deploy SA Availability Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Storage\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"90\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Storage/storageAccounts\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Storage/storageAccounts\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"Availability\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Storage/storageAccounts/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-AvailabilityAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for Storage Account Availability\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[parameters('resourceId')]\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"Availability\",\r\n \"metricNamespace\": \"Microsoft.Storage/storageAccounts\",\r\n \"metricName\": \"Availability\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#36": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_AvailableMemory_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Available Memory Alert\",\r\n \"description\": \"Policy to audit/deploy VM Available Memory Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"1000\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"disabled\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft-Azure-Monitor-SingleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft-Azure-Monitor-SingleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"Available Memory Bytes\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-AvailableMemoryAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for Virtual Machine Available Memory (MBytes)\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[parameters('resourceId')]\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"Average_AvailableMBytes\",\r\n \"metricNamespace\": \"Microsoft.Compute/virtualMachines\",\r\n \"metricName\": \"Available Memory Bytes\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#37": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_dataDiskReadLatency_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Data Disk Read Latency Alert\",\r\n \"description\": \"Policy to audit/deploy VM dataDiskReadLatency Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"30\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"disaplayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowdataDiskReadLatencyAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMdataDiskReadLatencyAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMHighdataDiskReadLatencyAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMHighdataDiskReadLatencyAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine dataDiskReadLatency\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"ReadLatencyMs\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])|where Disk !in ('C:','/')| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#38": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_dataDiskSpace_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Data Disk Space Alert\",\r\n \"description\": \"Policy to audit/deploy VM data Disk Space Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"LessThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"disaplayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"disaplayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both Windows and Linux\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowdataDiskSpaceAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMdataDiskSpaceAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowdataDiskSpaceAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowdataDiskSpaceAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine dataDiskSpace\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"FreeSpacePercentage\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])|where Disk !in ('C:','/')| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#39": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_dataDiskWriteLatency_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Data Disk Write Latency Alert\",\r\n \"description\": \"Policy to audit/deploy VM dataDiskWriteLatency Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"30\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"disaplayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowdataDiskWriteLatencyAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMdataDiskWriteLatencyAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMHighdataDiskWriteLatencyAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMHighdataDiskWriteLatencyAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine dataDiskWriteLatency\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"WriteLatencyMs\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])|where Disk !in ('C:','/')| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#37": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_dataDiskReadLatency_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Data Disk Read Latency Alert\",\r\n \"description\": \"Policy to audit/deploy VM dataDiskReadLatency Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"30\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayName\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowdataDiskReadLatencyAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMdataDiskReadLatencyAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowdataDiskReadLatencyAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLwdataDiskReadLatencyAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine dataDiskReadLatency\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"ReadLatencyMs\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])|where Disk !in ('C:','/')| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#38": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_dataDiskSpace_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Data Disk Space Alert\",\r\n \"description\": \"Policy to audit/deploy VM data Disk Space Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"LessThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both Windows and Linux\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowdataDiskSpaceAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMdataDiskSpaceAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowdataDiskSpaceAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowdataDiskSpaceAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine dataDiskSpace\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"FreeSpacePercentage\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])|where Disk !in ('C:','/')| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#39": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_dataDiskWriteLatency_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Data Disk Write Latency Alert\",\r\n \"description\": \"Policy to audit/deploy VM dataDiskWriteLatency Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"30\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowdataDiskWriteLatencyAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMdataDiskWriteLatencyAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowdataDiskWriteLatencyAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowdataDiskWriteLatencyAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine dataDiskWriteLatency\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"WriteLatencyMs\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])|where Disk !in ('C:','/')| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#4": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_activitylog_LAWorkspace_KeyRegen\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy Activity Log LA Workspace Regenerate Key Alert\",\r\n \"description\": \"Policy to Deploy Activity Log LA Workspace Regenerate Key Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\",\r\n \"_deployed_by_amba\": true\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring on resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.OperationalInsights/workspaces\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"deployIfNotExists\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/activityLogAlerts\",\r\n \"name\": \"ActivityLAWorkspaceRegenKey\",\r\n \"existenceScope\": \"resourceGroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n },\r\n {\r\n \"count\": {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\r\n \"where\": {\r\n \"anyOf\": [\r\n {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\r\n \"equals\": \"category\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\r\n \"equals\": \"Administrative\"\r\n }\r\n ]\r\n },\r\n {\r\n \"allOf\": [\r\n {\r\n \"field\": \"microsoft.insights/activityLogAlerts/condition.allOf[*].field\",\r\n \"equals\": \"operationName\"\r\n },\r\n {\r\n \"field\": \"microsoft.insights/activityLogAlerts/condition.allOf[*].equals\",\r\n \"equals\": \"Microsoft.OperationalInsights/workspaces/regeneratesharedkey/action\"\r\n }\r\n ]\r\n }\r\n ]\r\n }\r\n },\r\n \"equals\": 2\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"ActivityLAWorkspaceRegenKey\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"microsoft.insights/activityLogAlerts\",\r\n \"apiVersion\": \"2020-10-01\",\r\n \"name\": \"ActivityLAWorkspaceRegenKey\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Activity Log LA Workspace Regenerate Key\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().id]\"\r\n ],\r\n \"condition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"category\",\r\n \"equals\": \"Administrative\"\r\n },\r\n {\r\n \"field\": \"operationName\",\r\n \"equals\": \"Microsoft.OperationalInsights/workspaces/regeneratesharedkey/action\"\r\n },\r\n {\r\n \"field\": \"status\",\r\n \"containsAny\": [\r\n \"succeeded\"\r\n ]\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#40": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_HeartBeat_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM HeartBeat Alert\",\r\n \"description\": \"Policy to audit/deploy VM HeartBeat Alert for all VMs in the subscription\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"disaplayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMHeartBeatAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"HeartBeatAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMHeartBeatAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMHeartBeatAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine Heartbeat\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"Heartbeat| summarize TimeGenerated=max(TimeGenerated) by Computer, _ResourceId| extend Duration = datetime_diff('minute',now(),TimeGenerated)| summarize AggregatedValue = min(Duration) by Computer, bin(TimeGenerated,5m), _ResourceId\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": [\r\n \"*\"\r\n ]\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#40": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_HeartBeat_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM HeartBeat Alert\",\r\n \"description\": \"Policy to audit/deploy VM HeartBeat Alert for all VMs in the subscription\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMHeartBeatAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"HeartBeatAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMHeartBeatAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMHeartBeatAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine Heartbeat\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"Heartbeat| summarize TimeGenerated=max(TimeGenerated) by Computer, _ResourceId| extend Duration = datetime_diff('minute',now(),TimeGenerated)| summarize AggregatedValue = min(Duration) by Computer, bin(TimeGenerated,5m), _ResourceId\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": [\r\n \"*\"\r\n ]\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#41": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_HeartBeat_Alert_RG\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM HeartBeat Alert\",\r\n \"description\": \"Policy to audit/deploy VM HeartBeat Alert for VMs in the resource group\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(resourceGroup().name, '-VMHeartBeatAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name)]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(resourceGroup().name, '-VMHeartBeatAlert')]\",\r\n \"location\": \"[[resourceGroup().location]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(resourceGroup().name, '-VMHeartBeatAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine Heartbeat\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[resourceGroup().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"Heartbeat| summarize TimeGenerated=max(TimeGenerated) by Computer, _ResourceId| extend Duration = datetime_diff('minute',now(),TimeGenerated)| summarize AggregatedValue = min(Duration) by Computer, bin(TimeGenerated,5m), _ResourceId\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": [\r\n \"*\"\r\n ]\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": 1,\r\n \"minFailingPeriodsToAlert\": 1\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#42": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_NetworkIn_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Network Read Alert\",\r\n \"description\": \"Policy to audit/deploy VM Nework Read Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10000000\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Network Interface to be included to be monitored\",\r\n \"description\": \"Array of Network Interface to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMHighNetwrokInAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"networkInterfaceToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMNetworkInAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMHighNetworkInAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMHighNetworkInAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine NetworkIn\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"Network\\\" and Name == \\\"ReadBytesPerSecond\\\"| | extend NetworkInterface=tostring(todynamic(Tags)[\\\"vm.azm.ms/networkDeviceId\\\"])|summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, NetworkInterface\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"NetworkInterface\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#43": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_NetworkOut_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Network Write Alert\",\r\n \"description\": \"Policy to audit/deploy VM Network Out Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10000000\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Network Interface to be included to be monitored\",\r\n \"description\": \"Array of Network Interface to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMHighNetwrokInAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"networkInterfaceToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMNetworkOutAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMHighNetworkOutAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMHighNetworOutAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine NetworkOut\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"Network\\\" and Name == \\\"WriteBytesPerSecond\\\"| extend NetworkInterface=tostring(todynamic(Tags)[\\\"vm.azm.ms/networkDeviceId\\\"])|summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, NetworkInterface\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"NetworkInterface\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#44": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_OSDiskreadLatency_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM OS Disk Read Latency Alert\",\r\n \"description\": \"Policy to audit/deploy VM OSDiskreadLatency Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"30\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"disaplayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"C:\",\r\n \"/\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowOSDiskreadLatencyAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMOSDiskreadLatencyAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowOSDiskreadLatencyAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowOSDiskreadLatencyAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine OSDiskreadLatency\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"ReadLatencyMs\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#45": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_OSDiskSpace_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM OS Disk Space Alert\",\r\n \"description\": \"Policy to audit/deploy VM OSDiskSpace Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"LessThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"disaplayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"C:\",\r\n \"/\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowOSDiskSpaceAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMOSDiskSpaceAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowOSDiskSpaceAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowOSDiskSpaceAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine OSDiskSpace\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"FreeSpacePercentage\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#46": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_OSDiskwriteLatency_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM OS Disk Write Latency Alert\",\r\n \"description\": \"Policy to audit/deploy VM OSDiskwriteLatency Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"50\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"disaplayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"C:\",\r\n \"/\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowOSDiskwriteLatencyAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMOSDiskwriteLatencyAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowOSDiskwriteLatencyAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowOSDiskwriteLatencyAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine OSDiskwriteLatency\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"WriteLatencyMs\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#42": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_NetworkIn_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Network Read Alert\",\r\n \"description\": \"Policy to audit/deploy VM Nework Read Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10000000\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Network Interface to be included to be monitored\",\r\n \"description\": \"Array of Network Interface to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMHighNetwrokInAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMNetworkInAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMHighNetworkInAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMHighNetworkInAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine NetworkIn\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"Network\\\" and Name == \\\"ReadBytesPerSecond\\\"| extend NetworkInterface=tostring(todynamic(Tags)[\\\"vm.azm.ms/networkDeviceId\\\"])|summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, NetworkInterface\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"NetworkInterface\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#43": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_NetworkOut_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Network Write Alert\",\r\n \"description\": \"Policy to audit/deploy VM Network Out Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10000000\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Computers to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Network Interface to be included to be monitored\",\r\n \"description\": \"Array of Network Interface to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMHighNetworkOutAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMNetworkOutAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMHighNetworkOutAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMHighNetworkOutAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine NetworkOut\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"Network\\\" and Name == \\\"WriteBytesPerSecond\\\"| extend NetworkInterface=tostring(todynamic(Tags)[\\\"vm.azm.ms/networkDeviceId\\\"])|summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, NetworkInterface\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"NetworkInterface\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('networkInterfacesToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#44": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_OSDiskreadLatency_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM OS Disk Read Latency Alert\",\r\n \"description\": \"Policy to audit/deploy VM OSDiskreadLatency Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"30\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"C:\",\r\n \"/\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowOSDiskreadLatencyAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMOSDiskreadLatencyAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowOSDiskreadLatencyAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowOSDiskreadLatencyAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine OSDiskreadLatency\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"ReadLatencyMs\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#45": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_OSDiskSpace_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM OS Disk Space Alert\",\r\n \"description\": \"Policy to audit/deploy VM OSDiskSpace Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"LessThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayName\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"C:\",\r\n \"/\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowOSDiskSpaceAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMOSDiskSpaceAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowOSDiskSpaceAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowOSDiskSpaceAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine OSDiskSpace\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"FreeSpacePercentage\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#46": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_OSDiskwriteLatency_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM OS Disk Write Latency Alert\",\r\n \"description\": \"Policy to audit/deploy VM OSDiskwriteLatency Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"50\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of Computer to be monitored\"\r\n },\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\",\r\n \"metadata\": {\r\n \"displayname\": \"Disks to be included to be monitored\",\r\n \"description\": \"Array of disk to be monitored for disk both windows and linux\"\r\n },\r\n \"defaultValue\": [\r\n \"C:\",\r\n \"/\"\r\n ]\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowOSDiskwriteLatencyAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"disksToInclude\": {\r\n \"type\": \"array\"\r\n },\r\n \"computersToInclude\": {\r\n \"type\": \"array\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMOSDiskwriteLatencyAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowOSDiskwriteLatencyAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowOSDiskwriteLatencyAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine OSDiskwriteLatency\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"LogicalDisk\\\" and Name == \\\"WriteLatencyMs\\\"| extend Disk=tostring(todynamic(Tags)[\\\"vm.azm.ms/mountId\\\"])| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, Disk\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('computersToInclude')]\"\r\n },\r\n {\r\n \"name\": \"Disk\",\r\n \"operator\": \"Include\",\r\n \"values\": \"[[parameters('disksToInclude')]\"\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('disksToInclude')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('computersToInclude')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#47": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_CPU_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM CPU Alert\",\r\n \"description\": \"Policy to audit/deploy VM CPU Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"GreaterThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"85\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMHighCPUAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMCPUAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMHighCPUAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMHighCPUAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine CPU\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"| where Namespace == \\\"Processor\\\" and Name == \\\"UtilizationPercentage\\\"| summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": [\r\n \"*\"\r\n ]\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"1\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#48": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VM_Memory_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VM Memory Alert\",\r\n \"description\": \"Policy to audit/deploy VM Memory Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Compute\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\"\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Operator\"\r\n },\r\n \"allowedvalues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ],\r\n \"defaultvalue\": \"LessThan\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"TimeAggregation\"\r\n },\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ],\r\n \"defaultvalue\": \"Average\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"PT24H\"\r\n ],\r\n \"defaultValue\": \"PT15M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Resolve\",\r\n \"description\": \"Auto Resolve time for the alert in ISO 8601 format\"\r\n },\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"10\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Failing Periods\",\r\n \"description\": \"Number of failing periods before alert is fired\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayname\": \"Evaluation Periods\",\r\n \"description\": \"The number of aggregated lookback points.\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Compute/virtualMachines\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledQueryRules/displayName\",\r\n \"equals\": \"[[concat(subscription().displayName, '-VMLowMemoryAlert')]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/scopes[*]\",\r\n \"equals\": \"[[subscription().id]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/scheduledqueryrules/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolve\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoResolveTime\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n },\r\n \"operator\": {\r\n \"type\": \"String\"\r\n },\r\n \"timeAggregation\": {\r\n \"type\": \"String\"\r\n },\r\n \"failingPeriods\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"VMMemoryAlert\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/scheduledQueryRules\",\r\n \"apiVersion\": \"2022-08-01-preview\",\r\n \"name\": \"[[concat(subscription().displayName, '-VMLowMemoryAlert')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"properties\": {\r\n \"displayName\": \"[[concat(subscription().displayName, '-VMLowMemoryAlert')]\",\r\n \"description\": \"Log Alert for Virtual Machine Memory\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().Id]\"\r\n ],\r\n \"targetResourceTypes\": [\r\n \"Microsoft.Compute/virtualMachines\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"query\": \"InsightsMetrics| where Origin == \\\"vm.azm.ms\\\"|where Namespace == \\\"Memory\\\" and Name == \\\"AvailableMB\\\"| extend TotalMemory = toreal(todynamic(Tags)[\\\"vm.azm.ms/memorySizeMB\\\"]) | extend AvailableMemoryPercentage = (toreal(Val) / TotalMemory) * 100.0| summarize AggregatedValue = avg(AvailableMemoryPercentage) by bin(TimeGenerated, 15m), Computer, _ResourceId\",\r\n \"metricMeasureColumn\": \"AggregatedValue\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"operator\": \"[[parameters('operator')]\",\r\n \"resourceIdColumn\": \"_ResourceId\",\r\n \"timeAggregation\": \"[[parameters('timeAggregation')]\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"Computer\",\r\n \"operator\": \"Include\",\r\n \"values\": [\r\n \"*\"\r\n ]\r\n }\r\n ],\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": \"[[parameters('evaluationPeriods')]\",\r\n \"minFailingPeriodsToAlert\": \"[[parameters('failingPeriods')]\"\r\n }\r\n }\r\n ]\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"ruleResolveConfiguration\": {\r\n \"autoResolved\": \"[[parameters('autoResolve')]\",\r\n \"timeToResolve\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('autoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('autoResolveTime')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('operator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('timeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('failingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('evaluationPeriods')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#49": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VNET_DDoSAttack_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VNet DDoS Attack Alert\",\r\n \"description\": \"Policy to audit/deploy Virtual Network DDoS Attack Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Network\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"0\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/virtualNetworks\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/virtualNetworks\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"ifunderddosattack\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/virtualNetworks/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-DDOSAttackAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for VNet DDOS Attack\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[parameters('resourceId')]\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"ifunderddosattack\",\r\n \"metricNamespace\": \"Microsoft.Network/virtualNetworks\",\r\n \"metricName\": \"ifunderddosattack\",\r\n \"operator\": \"GreaterThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Maximum\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", @@ -181,14 +181,9100 @@ "$fxv#65": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VPNGw_TunnelIngressPacketDropCount_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VPNG Ingress Packet Drop Count Alert\",\r\n \"description\": \"Policy to audit/deploy VPN Gateway Ingress Packet Drop Count Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Network\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"3\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"microsoft.network/vpngateways\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"microsoft.network/vpngateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"TunnelIngressPacketDropCount\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/microsoft.network/vpngateways/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-TunnelIngressPacketDropCountAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for VPN Gateway tunnel TunnelIngressPacketDropCount\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[parameters('resourceId')]\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"alertSensitivity\": \"Medium\",\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": 4,\r\n \"minFailingPeriodsToAlert\": 4\r\n },\r\n \"name\": \"TunnelIngressPacketDropCount\",\r\n \"metricNamespace\": \"microsoft.network/vpngateways\",\r\n \"metricName\": \"TunnelIngressPacketDropCount\",\r\n \"operator\": \"GreaterThan\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"DynamicThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#66": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_VPNGw_TunnelIngressPacketDropMismatch_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy VPNG Ingress Packet Drop Mismatch Alert\",\r\n \"description\": \"Policy to audit/deploy VPN Gateway Ingress Packet Drop Mismatch Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Network\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"defaultValue\": \"3\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"microsoft.network/vpngateways\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"microsoft.network/vpngateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"TunnelIngressPacketDropTSMismatch\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/microsoft.network/vpngateways/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-TunnelIngressPacketDropTSMismatchAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for VPN Gateway tunnel TunnelIngressPacketDropTSMismatch\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[parameters('resourceId')]\"\r\n ],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"alertSensitivity\": \"Medium\",\r\n \"failingPeriods\": {\r\n \"numberOfEvaluationPeriods\": 4,\r\n \"minFailingPeriodsToAlert\": 4\r\n },\r\n \"name\": \"TunnelIngressPacketDropTSMismatch\",\r\n \"metricNamespace\": \"microsoft.network/vpngateways\",\r\n \"metricName\": \"TunnelIngressPacketDropTSMismatch\",\r\n \"operator\": \"GreaterThan\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"DynamicThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#67": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_RecoveryVault_BackupHealthMonitor_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy RV Backup Health Monitoring Alerts\",\r\n \"description\": \"Policy to audit/update Recovery Vault Backup Health Alerting to Azure monitor alerts\",\r\n \"metadata\": {\r\n \"version\": \"1.0.0\",\r\n \"category\": \"Site Recovery\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\r\n \"modify\",\r\n \"audit\",\r\n \"disabled\"\r\n ],\r\n \"defaultValue\": \"modify\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.RecoveryServices/Vaults\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n },\r\n {\r\n \"field\": \"Microsoft.RecoveryServices/vaults/monitoringSettings.azureMonitorAlertSettings.alertsForAllJobFailures\",\r\n \"notEquals\": \"Enabled\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"conflictEffect\": \"audit\",\r\n \"operations\": [\r\n {\r\n \"operation\": \"addOrReplace\",\r\n \"field\": \"Microsoft.RecoveryServices/vaults/monitoringSettings.classicAlertSettings.alertsForCriticalOperations\",\r\n \"value\": \"Disabled\"\r\n },\r\n {\r\n \"operation\": \"addOrReplace\",\r\n \"field\": \"Microsoft.RecoveryServices/vaults/monitoringSettings.azureMonitorAlertSettings.alertsForAllJobFailures\",\r\n \"value\": \"Enabled\"\r\n }\r\n ]\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#68": "{\r\n \"type\": \"Microsoft.Authorization/policySetDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Alerting-Connectivity\",\r\n \"properties\": {\r\n \"displayName\": \"Deploy Azure Monitor Baseline Alerts for Connectivity\",\r\n \"description\": \"Initiative to deploy AMBA alerts relevant to the ALZ Connectivity management group\",\r\n \"metadata\": {\r\n \"version\": \"1.0.2\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": true\r\n },\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"ALZ-Monitoring-RG\"\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"defaultValue\": {\r\n \"_deployed_by_amba\": true\r\n }\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"ERCIRQoSDropBitsinPerSecAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"ERCIRQoSDropBitsinPerSecWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"ERCIRQoSDropBitsinPerSecEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"ERCIRQoSDropBitsinPerSecPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"ERCIRQoSDropBitsinPerSecAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"ERCIRQoSDropBitsoutPerSecAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"ERCIRQoSDropBitsoutPerSecWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"ERCIRQoSDropBitsoutPerSecEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"ERCIRQoSDropBitsoutPerSecPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"ERCIRQoSDropBitsoutPerSecAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VPNGwBGPPeerStatusAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VPNGwBGPPeerStatusWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VPNGwBGPPeerStatusEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VPNGwBGPPeerStatusPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VPNGwBGPPeerStatusAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VPNGwBGPPeerStatusThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VnetGwERCpuUtilAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VnetGwERCpuUtilWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VnetGwERCpuUtilEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VnetGwERCpuUtilPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VnetGwERCpuUtilAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VnetGwERCpuUtilThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"80\"\r\n },\r\n \"VnetGwTunnelBWAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VnetGwTunnelBWWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VnetGwTunnelBWEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VnetGwTunnelBWPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VnetGwTunnelBWAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VnetGwTunnelBWThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VnetGwTunnelEgressAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VnetGwTunnelEgressThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VnetGwTunnelIngressAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VnetGwTunnelIngressThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VPNGWBandWidthUtilAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VPNGWBandWidthUtilWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VPNGWBandWidthUtilEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VPNGWBandWidthUtilPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VPNGWBandWidthUtilAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VPNGWBandWidthUtilThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VPNGWEgressAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VPNGWEgressWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VPNGWEgressEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VPNGWEgressPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VPNGWEgressAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VPNGWEgressThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VPNGWTunnelEgressPacketDropCountAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VPNGWTunnelEgressPacketDropCountWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VPNGWTunnelEgressPacketDropCountFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VPNGWTunnelEgressPacketDropCountPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VPNGWTunnelEgressPacketDropCountAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VPNGWTunnelEgressPacketDropMismatchAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VPNGWTunnelEgressPacketDropMismatchWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VPNGWTunnelEgressPacketDropMismatchFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VPNGWTunnelEgressPacketDropMismatchPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VPNGWTunnelEgressPacketDropMismatchAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VPNGWIngressAlertSeverity\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VPNGWIngressWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VPNGWIngressEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VPNGWIngressPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VPNGWIngressAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VPNGWIngressThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VPNGWIngressAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VPNGWTunnelIngressPacketDropCountAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VPNGWTunnelIngressPacketDropCountWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VPNGWTunnelIngressPacketDropCountFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VPNGWTunnelIngressPacketDropCountPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VPNGWTunnelIngressPacketDropCountAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VPNGWTunnelIngressPacketDropMismatchAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VPNGWTunnelIngressPacketDropMismatchWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VPNGWTunnelIngressPacketDropMismatchFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VPNGWTunnelIngressPacketDropMismatchPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VPNGWTunnelIngressPacketDropMismatchAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PDNSZCapacityUtilAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PDNSZCapacityUtilWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1H\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PDNSZCapacityUtilEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1H\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PDNSZCapacityUtilPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PDNSZCapacityUtilAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PDNSZCapacityUtilThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"80\"\r\n },\r\n \"PDNSZQueryVolumeAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"4\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PDNSZQueryVolumeWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1H\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PDNSZQueryVolumeEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1H\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PDNSZQueryVolumePolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PDNSZQueryVolumeAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PDNSZQueryVolumeThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"500\"\r\n },\r\n \"PDNSZRecordSetCapacityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PDNSZRecordSetCapacityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1H\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PDNSZRecordSetCapacityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1H\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PDNSZRecordSetCapacityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PDNSZRecordSetCapacityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PDNSZRecordSetCapacityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"80\"\r\n },\r\n \"PDNSZRegistrationCapacityUtilAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PDNSZRegistrationCapacityUtilWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1H\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PDNSZRegistrationCapacityUtilEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1H\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PDNSZRegistrationCapacityUtilPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PDNSZRegistrationCapacityUtilAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PDNSZRegistrationCapacityUtilThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"80\"\r\n },\r\n \"PIPDDoSAttackAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PIPDDoSAttackWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PIPDDoSAttackEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PIPDDoSAttackPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PIPDDoSAttackAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PIPDDoSAttackThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"0\"\r\n },\r\n \"PIPPacketsInDDoSAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"4\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PIPPacketsInDDoSWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PIPPacketsInDDoSEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PIPPacketsInDDoSPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PIPPacketsInDDoSAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PIPPacketsInDDoSThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"40000\"\r\n },\r\n \"PIPVIPAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PIPVIPAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PIPVIPAvailabilityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PIPVIPAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PIPVIPAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PIPVIPAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"PIPBytesInDDoSAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"4\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PIPBytesInDDoSWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PIPBytesInDDoSEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PIPBytesInDDoSPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PIPBytesInDDoSAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PIPBytesInDDoSThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"8000000\"\r\n },\r\n \"ERGwExpressRouteBitsInAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"ERGwExpressRouteBitsInWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"ERGwExpressRouteBitsInEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"ERGwExpressRouteBitsInPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"ERGwExpressRouteBitsInAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"ERGwExpressRouteBitsInThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"ERGwExpressRouteBitsOutAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"ERGwExpressRouteBitsOutWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"ERGwExpressRouteBitsOutEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"ERGwExpressRouteBitsOutPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"ERGwExpressRouteBitsOutAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"ERGwExpressRouteBitsOutThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"ERGwExpressRouteCpuUtilAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"ERGwExpressRouteCpuUtilWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"ERGwExpressRouteCpuUtilEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"ERGwExpressRouteCpuUtilPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"ERGwExpressRouteCpuUtilAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"ERGwExpressRouteCpuUtilThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"80\"\r\n },\r\n \"VNETDDOSAttackAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VNETDDOSAttackWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VNETDDOSAttackEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VNETDDOSAttackPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VNETDDOSAttackAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VNETDDOSAttackThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VnetGwTunnelEgressPacketDropCountAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressPacketDropCountWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressPacketDropCountEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressPacketDropCountPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressPacketDropCountAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VnetGwTunnelEgressPacketDropMismatchAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressPacketDropMismatchWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressPacketDropMismatchEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressPacketDropMismatchPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VnetGwTunnelEgressPacketDropMismatchAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VnetGwExpressRouteBitsPerSecondAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VnetGwExpressRouteBitsPerSecondWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VnetGwExpressRouteBitsPerSecondEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VnetGwExpressRouteBitsPerSecondPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VnetGwExpressRouteBitsPerSecondAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VnetGwExpressRouteBitsPerSecondThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VnetGwTunnelIngressPacketDropMismatchAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressPacketDropMismatchWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressPacketDropMismatchEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressPacketDropMismatchPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressPacketDropMismatchAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VnetGwTunnelIngressPacketDropCountAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressPacketDropCountWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressPacketDropCountEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressPacketDropCountPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VnetGwTunnelIngressPacketDropCountAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"ERCIRBgpAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"ERCIRBgpAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"ERCIRBgpAvailabilityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"ERCIRBgpAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"ERCIRBgpAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"ERCIRBgpAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"90\"\r\n },\r\n \"ERCIRArpAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"ERCIRArpAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"ERCIRArpAvailabilityFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"ERCIRArpAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"ERCIRArpAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"ERCIRArpAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"90\"\r\n },\r\n \"AFWSNATPortUtilizationAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"AFWSNATPortUtilizationWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"AFWSNATPortUtilizationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"AFWSNATPortUtilizationPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"AFWSNATPortUtilizationAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"AFWSNATPortUtilizationThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"80\"\r\n },\r\n \"FirewallHealthAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"0\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"FirewallHealthWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"FirewallHealthEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"FirewallHealthPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"FirewallHealthAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"FirewallHealthThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"90\"\r\n },\r\n \"activityFWDeleteAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"activityNSGDeleteAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"activityUDRUpdateAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"activityVPNGWDeleteAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n }\r\n },\r\n \"policyDefinitions\": [\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_ERCIRQoSDropBitsinPerSec\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERCIR_QosDropBitsInPerSecond_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsinPerSecAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsinPerSecWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsinPerSecEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsinPerSecPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsinPerSecAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_ERCIRQoSDropBitsoutPerSec\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERCIR_QosDropBitsOutPerSecond_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsoutPerSecAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsoutPerSecWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsoutPerSecEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsoutPerSecPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('ERCIRQoSDropBitsoutPerSecAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VPNGwBGPPeerStatus\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_BGPPeerStatus_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VPNGwBGPPeerStatusAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VPNGwBGPPeerStatusWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VPNGwBGPPeerStatusEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VPNGwBGPPeerStatusPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VPNGwBGPPeerStatusAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VPNGwBGPPeerStatusThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VnetGwERCpuUtil\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_ExpressRouteCpuUtil_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VnetGwERCpuUtilAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VnetGwERCpuUtilWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VnetGwERCpuUtilEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VnetGwERCpuUtilPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VnetGwERCpuUtilAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VnetGwERCpuUtilThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VnetGwTunnelBW\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelBandwidth_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VnetGwTunnelBWAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VnetGwTunnelBWWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VnetGwTunnelBWEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VnetGwTunnelBWPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VnetGwTunnelBWAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VnetGwTunnelBWThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VnetGwTunnelEgress\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelEgress_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VnetGwTunnelIngress\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelIngress_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VPNGWBandWidthUtil\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_BandwidthUtil_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VPNGWBandWidthUtilAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VPNGWBandWidthUtilWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VPNGWBandWidthUtilEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VPNGWBandWidthUtilPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VPNGWBandWidthUtilAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VPNGWBandWidthUtilThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VPNGWEgress\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_Egress_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VPNGWEgressAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VPNGWEgressWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VPNGWEgressEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VPNGWEgressPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VPNGWEgressAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VPNGWEgressThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VPNGWTunnelEgressPacketDropCount\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_TunnelEgressPacketDropCount_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropCountAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropCountWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropCountFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropCountPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropCountAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VPNGWTunnelEgressPacketDropMismatch\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_TunnelEgressPacketDropMismatch_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropMismatchAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropMismatchWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropMismatchFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropMismatchPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VPNGWTunnelEgressPacketDropMismatchAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VPNGWIngress\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_Ingress_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VPNGWIngressAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VPNGWIngressWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VPNGWIngressEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VPNGWIngressPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VPNGWIngressAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VPNGWIngressThreshold')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VPNGWIngressAutoMitigate')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VPNGWTunnelIngressPacketDropCount\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_TunnelIngressPacketDropCount_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropCountAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropCountWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropCountFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropCountPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropCountAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VPNGWTunnelIngressPacketDropMismatch\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_TunnelIngressPacketDropMismatch_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropMismatchAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropMismatchWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropMismatchFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropMismatchPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VPNGWTunnelIngressPacketDropMismatchAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PDNSZCapacityUtil\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PDNSZ_CapacityUtil_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PDNSZCapacityUtilAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PDNSZCapacityUtilWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PDNSZCapacityUtilEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PDNSZCapacityUtilPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PDNSZCapacityUtilAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PDNSZCapacityUtilThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PDNSZQueryVolume\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PDNSZ_QueryVolume_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PDNSZQueryVolumeAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PDNSZQueryVolumeWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PDNSZQueryVolumeEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PDNSZQueryVolumePolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PDNSZQueryVolumeAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PDNSZQueryVolumeThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PDNSZRecordSetCapacity\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PDNSZ_RecordSetCapacity_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PDNSZRecordSetCapacityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PDNSZRecordSetCapacityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PDNSZRecordSetCapacityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PDNSZRecordSetCapacityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PDNSZRecordSetCapacityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PDNSZRecordSetCapacityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PDNSZRegistrationCapacityUtil\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_DNSZ_RegistrationCapacityUtil_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PDNSZRegistrationCapacityUtilAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PDNSZRegistrationCapacityUtilWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PDNSZRegistrationCapacityUtilEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PDNSZRegistrationCapacityUtilPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PDNSZRegistrationCapacityUtilAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PDNSZRegistrationCapacityUtilThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_ERGwExpressRouteBitsIn\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERGw_ExpressRouteBitsIn_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsInAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsInWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsInEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsInPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsInAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsInThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_ERGwExpressRouteBitsOut\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERGw_ExpressRouteBitsOut_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsOutAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsOutWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsOutEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsOutPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsOutAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteBitsOutThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_ERGwExpressRouteCpuUtil\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERGw_ExpressRouteCpuUtil_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteCpuUtilAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteCpuUtilWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteCpuUtilEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteCpuUtilPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteCpuUtilAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('ERGwExpressRouteCpuUtilThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VnetGwTunnelEgressPacketDropCount\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelEgressPacketDropCount_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropCountAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropCountWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropCountEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropCountPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropCountAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VnetGwTunnelEgressPacketDropMismatch\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelEgressPacketDropMismatch_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropMismatchAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropMismatchWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropMismatchEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropMismatchPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VnetGwTunnelEgressPacketDropMismatchAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VnetGwExpressRouteBitsPerSecond\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_ExpressRouteBitsPerSecond_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VnetGwExpressRouteBitsPerSecondAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VnetGwExpressRouteBitsPerSecondWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VnetGwExpressRouteBitsPerSecondEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VnetGwExpressRouteBitsPerSecondPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VnetGwExpressRouteBitsPerSecondAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VnetGwExpressRouteBitsPerSecondThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VnetGwTunnelIngressPacketDropMismatchWindowSize\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelIngressPacketDropMismatch_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropMismatchAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropMismatchWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropMismatchEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropMismatchPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropMismatchAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VnetGwTunnelIngressPacketDropCountWindowSize\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelIngressPacketDropCount_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropCountAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropCountWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropCountEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropCountPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VnetGwTunnelIngressPacketDropCountAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_ERCIRBgpAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERCIR_BgpAvailability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('ERCIRBgpAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('ERCIRBgpAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('ERCIRBgpAvailabilityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('ERCIRBgpAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('ERCIRBgpAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('ERCIRBgpAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_ERCIRArpAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERCIR_ArpAvailability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('ERCIRArpAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('ERCIRArpAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('ERCIRArpAvailabilityFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('ERCIRArpAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('ERCIRArpAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('ERCIRArpAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_AFWSNATPortUtilization\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AFW_SNATPortUtilization_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('AFWSNATPortUtilizationAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('AFWSNATPortUtilizationWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('AFWSNATPortUtilizationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('AFWSNATPortUtilizationPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('AFWSNATPortUtilizationAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('AFWSNATPortUtilizationThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PIPBytesInDDoSEvaluationFrequency\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_BytesInDDoSAttack_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PIPDDoSAttack\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_DDoSAttack_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PIPPacketsInDDoS\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_PacketsInDDoSAttack_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PIPVIPAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_VIPAvailability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VNETDDOSAttack\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VNET_DDoSAttack_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_FirewallHealth\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AFW_FirewallHealth_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('FirewallHealthAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('FirewallHealthWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('FirewallHealthEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('FirewallHealthPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('FirewallHealthAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('FirewallHealthThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityFWDelete\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_Firewall_Delete')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityFWDeleteAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityNSGDelete\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_NSG_Delete')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityNSGDeleteAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityUDRUpdate\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_RouteTable_Update')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityUDRUpdateAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityVPNGWDelete\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_VPNGateway_Delete')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityVPNGWDeleteAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n ],\r\n \"policyType\": \"Custom\",\r\n \"policyDefinitionGroups\": null\r\n }\r\n}\r\n", - "$fxv#69": "{\r\n \"type\": \"Microsoft.Authorization/policySetDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Alerting-Identity\",\r\n \"properties\": {\r\n \"displayName\": \"Deploy Azure Monitor Baseline Alerts for Identity\",\r\n \"description\": \"Initiative to deploy AMBA alerts relevant to the ALZ Identity management group\",\r\n \"metadata\": {\r\n \"version\": \"1.0.2\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": true\r\n },\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"ALZ-Monitoring-RG\"\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"defaultValue\": {\r\n \"_deployed_by_amba\": true\r\n }\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"KVRequestAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"KVRequestWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"KVRequestEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"KVRequestPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"KVRequestAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"KvAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"KvAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"KvAvailabilityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"KvAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"KvAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"KVAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"20\"\r\n },\r\n \"KvLatencyAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"KvLatencyAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"KvLatencyAvailabilityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"KvLatencyAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"KvLatencyAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"KvLatencyAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1000\"\r\n },\r\n \"KVCapacityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"KVCapacityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"KVCapacityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"KVCapacityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"KVCapacityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"KVCapacityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"75\"\r\n },\r\n \"activityKVDeleteAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n }\r\n },\r\n \"policyDefinitions\": [\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KVRequest\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Requests_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KVRequestAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KVRequestWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KVRequestEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KVRequestPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KVRequestAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KvAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Availability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KvAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KvAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KvAvailabilityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KvAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KvAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('KVAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KvLatencyAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Latency_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KVCapacity\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Capacity_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KVCapacityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KVCapacityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KVCapacityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KVCapacityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KVCapacityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('KVCapacityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityKVDelete\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_KeyVault_Delete')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityKVDeleteAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n ],\r\n \"policyType\": \"Custom\",\r\n \"policyDefinitionGroups\": null\r\n }\r\n}\r\n", + "$fxv#68": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_AG_ApplicationGatewayTotalTime_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy AGW ApplicationGatewayTotalTime Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Application Gateway ApplicationGatewayTotalTime Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"alertSensitivity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert Sensitivity\",\r\n \"description\": \"Alert Sensitivity for the alert\"\r\n },\r\n \"allowedValues\": [\"Low\", \"Medium\", \"High\"],\r\n \"defaultValue\": \"Medium\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Network/applicationgateways/sku.name\",\r\n \"In\": [\"Standard_v2\", \"WAF_v2\"]\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"ApplicationGatewayTotalTime\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"alertSensitivity\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-agApplicationGatewayTotalTime')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for App Gateway ApplicationGatewayTotalTime\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"ApplicationGatewayTotalTime\",\r\n \"metricNamespace\": \"Microsoft.Network/applicationgateways\",\r\n \"metricName\": \"ApplicationGatewayTotalTime\",\r\n \"operator\": \"GreaterThan\",\r\n \"alertSensitivity\": \"[[parameters('alertSensitivity')]\",\r\n \"failingPeriods\": {\r\n \"minFailingPeriodsToAlert\": 2,\r\n \"numberOfEvaluationPeriods\": 2\r\n },\r\n \"timeAggregation\": \"Total\",\r\n \"criterionType\": \"DynamicThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"alertSensitivity\": {\r\n \"value\": \"[[parameters('alertSensitivity')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"alertSensitivity\": {\r\n \"value\": \"[[parameters('alertSensitivity')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#69": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_AG_BackendLastByteResponseTime_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy AGW BackendLastByteResponseTime Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Application Gateway BackendLastByteResponseTime Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"alertSensitivity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert Sensitivity\",\r\n \"description\": \"Alert Sensitivity for the alert\"\r\n },\r\n \"allowedValues\": [\"Low\", \"Medium\", \"High\"],\r\n \"defaultValue\": \"Medium\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Network/applicationgateways/sku.name\",\r\n \"In\": [\"Standard_v2\", \"WAF_v2\"]\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"BackendLastByteResponseTime\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"alertSensitivity\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-agBackendLastByteResponseTime')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for App Gateway BackendLastByteResponseTime\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"BackendLastByteResponseTime\",\r\n \"metricNamespace\": \"Microsoft.Network/applicationgateways\",\r\n \"metricName\": \"BackendLastByteResponseTime\",\r\n \"operator\": \"GreaterThan\",\r\n \"alertSensitivity\": \"[[parameters('alertSensitivity')]\",\r\n \"failingPeriods\": {\r\n \"minFailingPeriodsToAlert\": 2,\r\n \"numberOfEvaluationPeriods\": 2\r\n },\r\n \"timeAggregation\": \"Total\",\r\n \"criterionType\": \"DynamicThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"alertSensitivity\": {\r\n \"value\": \"[[parameters('alertSensitivity')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"alertSensitivity\": {\r\n \"value\": \"[[parameters('alertSensitivity')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#7": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_activitylog_RouteTable_Update\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy Activity Log Route Table Update Alert\",\r\n \"description\": \"Policy to Deploy Activity Log Route Table Update Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"category\": \"Network\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\",\r\n \"_deployed_by_amba\": true\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring on resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/routeTables\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"deployIfNotExists\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/activityLogAlerts\",\r\n \"name\": \"ActivityUDRUpdate\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n },\r\n {\r\n \"count\": {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\r\n \"where\": {\r\n \"anyOf\": [\r\n {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\r\n \"equals\": \"category\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\r\n \"equals\": \"Administrative\"\r\n }\r\n ]\r\n },\r\n {\r\n \"allOf\": [\r\n {\r\n \"field\": \"microsoft.insights/activityLogAlerts/condition.allOf[*].field\",\r\n \"equals\": \"operationName\"\r\n },\r\n {\r\n \"field\": \"microsoft.insights/activityLogAlerts/condition.allOf[*].equals\",\r\n \"equals\": \"Microsoft.Network/routeTables/routes/write\"\r\n }\r\n ]\r\n }\r\n ]\r\n }\r\n },\r\n \"equals\": 2\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"ActivityUDRUpdate\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"microsoft.insights/activityLogAlerts\",\r\n \"apiVersion\": \"2020-10-01\",\r\n \"name\": \"ActivityUDRUpdate\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Activity Log Route table update\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().id]\"\r\n ],\r\n \"condition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"category\",\r\n \"equals\": \"Administrative\"\r\n },\r\n {\r\n \"field\": \"operationName\",\r\n \"equals\": \"Microsoft.Network/routeTables/routes/write\"\r\n },\r\n {\r\n \"field\": \"status\",\r\n \"containsAny\": [\r\n \"succeeded\"\r\n ]\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", - "$fxv#70": "{\r\n \"type\": \"Microsoft.Authorization/policySetDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Alerting-LandingZone\",\r\n \"properties\": {\r\n \"displayName\": \"Deploy Azure Monitor Baseline Alerts for Landing Zone\",\r\n \"description\": \"Initiative to deploy AMBA alerts relevant to the ALZ LandingZone management group\",\r\n \"metadata\": {\r\n \"version\": \"1.0.2\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": true\r\n },\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"ALZ-Monitoring-RG\"\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"defaultValue\": {\r\n \"_deployed_by_amba\": true\r\n }\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"KVRequestAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"KVRequestWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"KVRequestEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"KVRequestPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"KVRequestAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"KvAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"KvAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"KvAvailabilityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"KvAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"KvAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"KVAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"20\"\r\n },\r\n \"KvLatencyAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"KvLatencyAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"KvLatencyAvailabilityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"KvLatencyAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"KvLatencyAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"KvLatencyAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1000\"\r\n },\r\n \"KVCapacityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"KVCapacityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"KVCapacityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"KVCapacityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"KVCapacityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"KVCapacityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"75\"\r\n },\r\n \"activityKVDeleteAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"StorageAccountAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"StorageAccountAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"StorageAccountAvailabilityFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"StorageAccountAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"StorageAccountAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"StorageAccountAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"90\"\r\n },\r\n \"PIPDDoSAttackAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PIPDDoSAttackWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PIPDDoSAttackEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PIPDDoSAttackPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PIPDDoSAttackAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PIPDDoSAttackThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"0\"\r\n },\r\n \"PIPPacketsInDDoSAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"4\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PIPPacketsInDDoSWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PIPPacketsInDDoSEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PIPPacketsInDDoSPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PIPPacketsInDDoSAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PIPPacketsInDDoSThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"40000\"\r\n },\r\n \"PIPVIPAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PIPVIPAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PIPVIPAvailabilityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PIPVIPAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PIPVIPAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PIPVIPAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"PIPBytesInDDoSAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"4\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"PIPBytesInDDoSWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"PIPBytesInDDoSEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"PIPBytesInDDoSPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"PIPBytesInDDoSAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"PIPBytesInDDoSThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"8000000\"\r\n },\r\n \"RVBackupHealthMonitorPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"modify\",\r\n \"allowedValues\": [\r\n \"modify\",\r\n \"audit\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VNETDDOSAttackAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VNETDDOSAttackWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VNETDDOSAttackEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VNETDDOSAttackPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VNETDDOSAttackAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VNETDDOSAttackThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"activityNSGDeleteAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"activityUDRUpdateAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMHeartBeatRGAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMHeartBeatRGWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMHeartBeatRGEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMHeartBeatRGAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMHeartBeatRGAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMHeartBeatRGAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMHeartBeatRGPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMHeartBeatRGAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMHeartBeatRGThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"10\"\r\n },\r\n \"VMHeartBeatRGOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"GreaterThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMHeartBeatRGTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMNetworkInAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMNetworkInWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMNetworkInEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMNetworkInAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMNetworkInAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMNetworkInAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMNetworkInPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMNetworkInAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMNetworkInThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"10000000\"\r\n },\r\n \"VMNetworkInOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"GreaterThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMNetworkInTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMNetworkInEvaluationPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMNetworkInFailingPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMNetworkInComputersToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMNetworkInNetworkInterfaceToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMNetworkOutAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMNetworkOutWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMNetworkOutEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMNetworkOutAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMNetworkOutAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMNetworkOutAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMNetworkOutPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMNetworkOutAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMNetworkOutThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"10000000\"\r\n },\r\n \"VMNetworkOutOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"GreaterThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMNetworkOutTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMNetworkOutEvaluationPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMNetworkOutFailingPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMNetworkOutComputersToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMNetworkOutNetworkInterfaceToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMOSDiskReadLatencyAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMOSDiskReadLatencyWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMOSDiskReadLatencyEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMOSDiskReadLatencyAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMOSDiskReadLatencyAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMOSDiskReadLatencyAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMOSDiskReadLatencyPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMOSDiskReadLatencyAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMOSDiskReadLatencyThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"30\"\r\n },\r\n \"VMOSDiskReadLatencyOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"LessThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMOSDiskReadLatencyTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMOSDiskReadLatencyEvaluationPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMOSDiskReadLatencyFailingPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMOSDiskReadLatencyComputersToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMOSDiskReadLatencyDisksToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"C:\",\r\n \"/\"\r\n ]\r\n },\r\n \"VMOSDiskWriteLatencyAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMOSDiskWriteLatencyWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMOSDiskWriteLatencyEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMOSDiskWriteLatencyAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMOSDiskWriteLatencyAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMOSDiskWriteLatencyAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMOSDiskWriteLatencyPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMOSDiskWriteLatencyAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMOSDiskWriteLatencyThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"50\"\r\n },\r\n \"VMOSDiskWriteLatencyOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"LessThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMOSDiskWriteLatencyTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMOSDiskWriteLatencyEvaluationPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMOSDiskWriteLatencyFailingPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMOSDiskWriteLatencyComputersToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMOSDiskWriteLatencyDisksToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"C:\",\r\n \"/\"\r\n ]\r\n },\r\n \"VMOSDiskSpaceAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMOSDiskSpaceWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMOSDiskSpaceEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMOSDiskSpaceAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMOSDiskSpaceAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMOSDiskSpaceAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMOSDiskSpacePolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMOSDiskSpaceAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMOSDiskSpaceThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"10\"\r\n },\r\n \"VMOSDiskSpaceOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"LessThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMOSDiskSpaceTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMOSDiskSpaceEvaluationPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMOSDiskSpaceFailingPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMOSDiskSpaceComputersToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMOSDiskSpaceDisksToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"C:\",\r\n \"/\"\r\n ]\r\n },\r\n \"VMPercentCPUAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMPercentCPUWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMPercentCPUEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMPercentCPUAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMPercentCPUAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMPercentCPUAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMPercentCPUPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMPercentCPUAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMPercentCPUThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"85\"\r\n },\r\n \"VMPercentCPUOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"GreaterThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMPercentCPUTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMPercentMemoryAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMPercentMemoryWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMPercentMemoryEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMPercentMemoryAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMPercentMemoryAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMPercentMemoryAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMPercentMemoryPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMPercentMemoryAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMPercentMemoryThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"10\"\r\n },\r\n \"VMPercentMemoryOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"LessThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMPercentMemoryTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMDataDiskSpaceAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMDataDiskSpaceWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMDataDiskSpaceEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMDataDiskSpaceAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMDataDiskSpaceAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMDataDiskSpaceAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMDataDiskSpacePolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMDataDiskSpaceAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMDataDiskSpaceThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"10\"\r\n },\r\n \"VMDataDiskSpaceOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"LessThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMDataDiskSpaceTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMDataDiskSpaceEvaluationPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMDataDiskSpaceFailingPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMDataDiskSpaceDisksToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMDataDiskReadLatencyAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMDataDiskReadLatencyWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMDataDiskReadLatencyEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMDataDiskReadLatencyAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMDataDiskReadLatencyAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMDataDiskReadLatencyAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMDataDiskReadLatencyPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMDataDiskReadLatencyAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMDataDiskReadLatencyThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"30\"\r\n },\r\n \"VMDataDiskReadLatencyOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"LessThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMDataDiskReadLatencyTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMDataDiskReadLatencyEvaluationPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMDataDiskReadLatencyFailingPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMDataDiskReadLatencyComputersToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMDataDiskReadLatencyDisksToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMDataDiskWriteLatencyAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"VMDataDiskWriteLatencyWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT15M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"VMDataDiskWriteLatencyEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"VMDataDiskWriteLatencyAutoMitigate\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMDataDiskWriteLatencyAutoResolve\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMDataDiskWriteLatencyAutoResolveTime\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"00:10:00\"\r\n },\r\n \"VMDataDiskWriteLatencyPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"VMDataDiskWriteLatencyAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"VMDataDiskWriteLatencyThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"30\"\r\n },\r\n \"VMDataDiskWriteLatencyOperator\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"LessThan\",\r\n \"allowedValues\": [\r\n \"Equals\",\r\n \"GreaterThan\",\r\n \"GreaterThanOrEqual\",\r\n \"LessThan\",\r\n \"LessThanOrEqual\"\r\n ]\r\n },\r\n \"VMDataDiskWriteLatencyTimeAggregation\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"Average\",\r\n \"allowedValues\": [\r\n \"Average\",\r\n \"Count\",\r\n \"Maximum\",\r\n \"Minimum\",\r\n \"Total\"\r\n ]\r\n },\r\n \"VMDataDiskWriteLatencyEvaluationPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMDataDiskWriteLatencyFailingPeriods\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1\"\r\n },\r\n \"VMDataDiskWriteLatencyComputersToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n },\r\n \"VMDataDiskWriteLatencyDisksToInclude\": {\r\n \"type\": \"array\",\r\n \"defaultValue\": [\r\n \"*\"\r\n ]\r\n }\r\n },\r\n \"policyDefinitions\": [\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KVRequest\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Requests_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KVRequestAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KVRequestWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KVRequestEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KVRequestPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KVRequestAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KvAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Availability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KvAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KvAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KvAvailabilityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KvAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KvAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('KVAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KvLatencyAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Latency_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KVCapacity\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Capacity_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KVCapacityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KVCapacityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KVCapacityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KVCapacityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KVCapacityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('KVCapacityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityKVDelete\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_KeyVault_Delete')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityKVDeleteAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_StorageAccountAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_StorageAccount_Availability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PIPBytesInDDoS\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_BytesInDDoSAttack_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PIPBytesInDDoSThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PIPDDoSAttack\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_DDoSAttack_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PIPDDoSAttackThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PIPPacketsInDDoS\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_PacketsInDDoSAttack_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PIPPacketsInDDoSThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_PIPVIPAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_VIPAvailability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('PIPVIPAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityNSGDelete\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_NSG_Delete')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityNSGDeleteAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityUDRUpdate\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_RouteTable_Update')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityUDRUpdateAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_RVBackupHealthMonitor\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_RecoveryVault_BackupHealthMonitor_Alert')]\",\r\n \"parameters\": {\r\n \"effect\": {\r\n \"value\": \"[[parameters('RVBackupHealthMonitorPolicyEffect')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VNETDDOSAttack\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VNET_DDoSAttack_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VNETDDOSAttackThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMHeartBeatRG\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_HeartBeat_Alert')]\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMHeartBeatRGTimeAggregation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMNetworkIn\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_NetworkIn_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMNetworkInAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMNetworkInWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMNetworkInEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMNetworkInAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMNetworkInAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMNetworkInAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMNetworkInPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMNetworkInAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMNetworkInThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMNetworkInOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMNetworkInTimeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('VMNetworkInFailingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('VMNetworkInEvaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('VMNetworkInComputersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('VMNetworkInNetworkInterfaceToInclude')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMNetworkOut\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_NetworkOut_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMNetworkOutAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMNetworkOutWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMNetworkOutEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMNetworkOutAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMNetworkOutAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMNetworkOutAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMNetworkOutPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMNetworkOutAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMNetworkOutThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMNetworkOutOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMNetworkOutTimeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('VMNetworkOutFailingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('VMNetworkOutEvaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('VMNetworkOutComputersToInclude')]\"\r\n },\r\n \"networkInterfacesToInclude\": {\r\n \"value\": \"[[parameters('VMNetworkOutNetworkInterfaceToInclude')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMOSDiskReadLatency\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_OSDiskreadLatency_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyTimeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyFailingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyEvaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyComputersToInclude')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('VMOSDiskReadLatencyDisksToInclude')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMOSDiskWriteLatency\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_OSDiskwriteLatency_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyTimeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyFailingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyEvaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyComputersToInclude')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('VMOSDiskWriteLatencyDisksToInclude')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMOSDiskSpace\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_OSDiskSpace_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMOSDiskSpacePolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceTimeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceFailingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceEvaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceComputersToInclude')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('VMOSDiskSpaceDisksToInclude')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMPercentCPU\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_CPU_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMPercentCPUAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMPercentCPUWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMPercentCPUEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMPercentCPUAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMPercentCPUAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMPercentCPUAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMPercentCPUPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMPercentCPUAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMPercentCPUThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMPercentCPUOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMPercentCPUTimeAggregation')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMPercentMemory\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_Memory_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMPercentMemoryAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMPercentMemoryWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMPercentMemoryEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMPercentMemoryAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMPercentMemoryAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMPercentMemoryAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMPercentMemoryPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMPercentMemoryAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMPercentMemoryThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMPercentMemoryOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMPercentMemoryTimeAggregation')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMDataDiskSpace\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_dataDiskSpace_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMDataDiskSpacePolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceTimeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceFailingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceEvaluationPeriods')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('VMDataDiskSpaceDisksToInclude')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMDataDiskReadLatency\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_dataDiskReadLatency_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyTimeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyFailingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyEvaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyComputersToInclude')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('VMDataDiskReadLatencyDisksToInclude')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_VMDataDiskWriteLatency\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_dataDiskWriteLatency_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyEvaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyAutoMitigate')]\"\r\n },\r\n \"autoResolve\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyAutoResolve')]\"\r\n },\r\n \"autoResolveTime\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyAutoResolveTime')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyThreshold')]\"\r\n },\r\n \"operator\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyOperator')]\"\r\n },\r\n \"timeAggregation\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyTimeAggregation')]\"\r\n },\r\n \"failingPeriods\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyFailingPeriods')]\"\r\n },\r\n \"evaluationPeriods\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyEvaluationPeriods')]\"\r\n },\r\n \"computersToInclude\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyComputersToInclude')]\"\r\n },\r\n \"disksToInclude\": {\r\n \"value\": \"[[parameters('VMDataDiskWriteLatencyDisksToInclude')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n ],\r\n \"policyType\": \"Custom\",\r\n \"policyDefinitionGroups\": null\r\n }\r\n}\r\n", - "$fxv#71": "{\r\n \"type\": \"Microsoft.Authorization/policySetDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Alerting-Management\",\r\n \"properties\": {\r\n \"displayName\": \"Deploy Azure Monitor Baseline Alerts for Management\",\r\n \"description\": \"Initiative to deploy AMBA alerts relevant to the ALZ Management management group\",\r\n \"metadata\": {\r\n \"version\": \"1.0.2\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": true\r\n },\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"ALZ-Monitoring-RG\"\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"defaultValue\": {\r\n \"_deployed_by_amba\": true\r\n }\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"AATotalJobAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"AATotalJobAlertWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"AATotalJobAlertEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"AATotalJobAlertPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"AATotalJobAlertAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"AATotalJobAlertThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"20\"\r\n },\r\n \"RVBackupHealthPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"modify\",\r\n \"allowedValues\": [\r\n \"modify\",\r\n \"audit\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"StorageAccountAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ]\r\n },\r\n \"StorageAccountAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ]\r\n },\r\n \"StorageAccountAvailabilityFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ]\r\n },\r\n \"StorageAccountAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ]\r\n },\r\n \"StorageAccountAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"StorageAccountAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"90\"\r\n },\r\n \"activityLAWDeleteAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"activityLAWKeyRegenAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n }\r\n },\r\n \"policyDefinitions\": [\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityLAWDelete\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_LAWorkspace_Delete')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityLAWDeleteAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityLAWKeyRegen\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_LAWorkspace_KeyRegen')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityLAWKeyRegenAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_AATotalJob\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AA_TotalJob_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('AATotalJobAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('AATotalJobAlertWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('AATotalJobAlertEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('AATotalJobAlertPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('AATotalJobAlertAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('AATotalJobAlertThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_RVBackupHealth\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_RecoveryVault_BackupHealthMonitor_Alert')]\",\r\n \"parameters\": {\r\n \"effect\": {\r\n \"value\": \"[[parameters('RVBackupHealthPolicyEffect')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_StorageAccountAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_StorageAccount_Availability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityThreshold')]\"\r\n }\r\n }\r\n }\r\n ],\r\n \"policyType\": \"Custom\",\r\n \"policyDefinitionGroups\": null\r\n }\r\n}\r\n", - "$fxv#72": "{\r\n \"type\": \"Microsoft.Authorization/policySetDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Alerting-ServiceHealth\",\r\n \"properties\": {\r\n \"displayName\": \"Deploy Azure Monitor Baseline Alerts for Service Health\",\r\n \"description\": \"Initiative to deploy AMBA Service Health alerts to Azure services\",\r\n \"metadata\": {\r\n \"version\": \"1.1.0\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": true\r\n },\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"ALZ-Monitoring-RG\"\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"defaultValue\": {\r\n \"_deployed_by_amba\": true\r\n }\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"ResHlthUnhealthyAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"SvcHlthAdvisoryAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"SvcHlthIncidentAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"SvcHlthMaintenanceAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"svcHlthSecAdvisoryAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"action@mail.com\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyDefinitions\": [\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_ResHlthUnhealthy\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ResourceHealth_Unhealthy_Alert')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('ResHlthUnhealthyAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_SvcHlthAdvisory\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_HealthAdvisory')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('SvcHlthAdvisoryAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_SvcHlthIncident\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_Incident')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('SvcHlthIncidentAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_SvcHlthMaintenance\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_Maintenance')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('SvcHlthMaintenanceAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_svcHlthSecAdvisory\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_SecurityAdvisory')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('svcHlthSecAdvisoryAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_AlertProcessing_Rule\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AlertProcessing_Rule')]\",\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n },\r\n \"MonitorDisable\": {\r\n \"value\": \"[[parameters('MonitorDisable')]\"\r\n }\r\n }\r\n }\r\n ],\r\n \"policyType\": \"Custom\",\r\n \"policyDefinitionGroups\": null\r\n }\r\n}\r\n", + "$fxv#70": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_AG_CapacityUnits_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy AGW Capacity Units Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Application Gateway CapacityUnits Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"75\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Network/applicationgateways/sku.name\",\r\n \"In\": [\"Standard_v2\", \"WAF_v2\"]\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"CapacityUnits\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-agCapacityUnits')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for App Gateway Capacity Units\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"CapacityUnits\",\r\n \"metricNamespace\": \"Microsoft.Network/applicationgateways\",\r\n \"metricName\": \"CapacityUnits\",\r\n \"operator\": \"GreaterThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#71": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_AG_ComputeUnits_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy AGW Compute Units Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Application Gateway ComputeUnits Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"75\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Network/applicationgateways/sku.name\",\r\n \"In\": [\"Standard_v2\", \"WAF_v2\"]\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"ComputeUnits\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/Microsoft.Network/applicationgateways/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-agComputeUnits')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for App Gateway Compute Units\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"ComputeUnits\",\r\n \"metricNamespace\": \"Microsoft.Network/applicationgateways\",\r\n \"metricName\": \"ComputeUnits\",\r\n \"operator\": \"GreaterThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#72": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_AG_CPUUtilization_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy AGW CPU Utilization Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Application Gateway CPU Utilization Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"80\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Network/applicationgateways/sku.name\",\r\n \"notIn\": [\"Standard_v2\", \"WAF_v2\"]\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"CpuUtilization\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-agCpuUtilization')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for App Gateway CPU Utilization\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"CpuUtilization\",\r\n \"metricNamespace\": \"Microsoft.Network/applicationgateways\",\r\n \"metricName\": \"CpuUtilization\",\r\n \"operator\": \"GreaterThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#73": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_AG_FailedRequests_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy AGW FailedRequests Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Application Gateway FailedRequests Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"FailedRequests\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-agFailedRequests')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for App Gateway FailedRequests\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"FailedRequests\",\r\n \"metricNamespace\": \"Microsoft.Network/applicationgateways\",\r\n \"metricName\": \"FailedRequests\",\r\n \"operator\": \"GreaterThan\",\r\n \"alertSensitivity\": \"Medium\",\r\n \"failingPeriods\": {\r\n \"minFailingPeriodsToAlert\": 2,\r\n \"numberOfEvaluationPeriods\": 2\r\n },\r\n \"timeAggregation\": \"Total\",\r\n \"criterionType\": \"DynamicThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#74": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_AG_ResponseStatus_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy AGW ResponseStatus Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Application Gateway ResponseStatus Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"alertSensitivity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert Sensitivity\",\r\n \"description\": \"Alert Sensitivity for the alert\"\r\n },\r\n \"allowedValues\": [\"Low\", \"Medium\", \"High\"],\r\n \"defaultValue\": \"Medium\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"ResponseStatus\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"alertSensitivity\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-agResponseStatus')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for App Gateway ResponseStatus\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"ResponseStatus\",\r\n \"metricNamespace\": \"Microsoft.Network/applicationgateways\",\r\n \"metricName\": \"ResponseStatus\",\r\n \"operator\": \"GreaterThan\",\r\n \"alertSensitivity\": \"[[parameters('alertSensitivity')]\",\r\n \"failingPeriods\": {\r\n \"minFailingPeriodsToAlert\": 2,\r\n \"numberOfEvaluationPeriods\": 2\r\n },\r\n \"timeAggregation\": \"Total\",\r\n \"dimensions\": [\r\n {\r\n \"name\": \"HttpStatusGroup\",\r\n \"operator\": \"Include\",\r\n \"values\": [\"4xx\", \"5xx\"]\r\n }\r\n ],\r\n \"criterionType\": \"DynamicThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"alertSensitivity\": {\r\n \"value\": \"[[parameters('alertSensitivity')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"alertSensitivity\": {\r\n \"value\": \"[[parameters('alertSensitivity')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#75": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_AG_UnhealthyHostCount_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy AGW Unhealthy Host Count Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Application Gateway Unhealthy Host Count Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"20\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/applicationgateways\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"UnhealthyHostCount\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-agUnhealthyHostCount')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for App Gateway Unhealthy Host Count\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"CpuUtilization\",\r\n \"metricNamespace\": \"Microsoft.Network/applicationgateways\",\r\n \"metricName\": \"UnhealthyHostCount\",\r\n \"operator\": \"GreaterThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#76": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ERP_ExpressRouteBitsIn_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ER Direct ExpressRoute Bits In Alert\",\r\n \"description\": \"Policy to audit/deploy ER Direct Connection BitsInPerSecond Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"0\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"disabled\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"PortBitsInPerSecond\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-DirectERBitsInAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ER Direct Connection BitsInPerSecond\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"PortBitsInPerSecond\",\r\n \"metricNamespace\": \"Microsoft.Network/expressRoutePorts\",\r\n \"metricName\": \"PortBitsInPerSecond\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#77": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ERP_ExpressRouteBitsOut_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ER Direct ExpressRoute Bits Out Alert\",\r\n \"description\": \"Policy to audit/deploy ER Direct Connection BitsOutPerSecond Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"0\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"1\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"disabled\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"PortBitsOutPerSecond\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-DirectERBitsOutAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ER Direct Connection BitsOutPerSecond\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"PortBitsOutPerSecond\",\r\n \"metricNamespace\": \"Microsoft.Network/expressRoutePorts\",\r\n \"metricName\": \"PortBitsOutPerSecond\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#78": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ERP_ExpressRoutLineProtocol_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ER Direct ExpressRoute LineProtocol Alert\",\r\n \"description\": \"Policy to audit/deploy ER Direct LineProtocol Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"0\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"0.9\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"disabled\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"LineProtocol\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-DirectERLineProtocolAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ER Direct Connection LineProtocolPerSecond\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"LineProtocol\",\r\n \"metricNamespace\": \"Microsoft.Network/expressRoutePorts\",\r\n \"metricName\": \"LineProtocol\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#79": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ERP_ExpressRoutRxLightLevell_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ER Direct ExpressRoute RxLightLevel High Alert\",\r\n \"description\": \"Policy to audit/deploy ER Direct RxLightLevel High Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"0\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"disabled\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"RxLightLevel\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].StaticThresholdCriterion.operator\",\r\n \"equals\": \"GreaterThan\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-DirectERRxLightLevelHighAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ER Direct Connection RxLightLevelHigh\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"RxLightLevel\",\r\n \"metricNamespace\": \"Microsoft.Network/expressRoutePorts\",\r\n \"metricName\": \"RxLightLevel\",\r\n \"operator\": \"GreaterThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", "$fxv#8": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_activitylog_ServiceHealth_HealthAdvisory\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy Service Health Advisory Alert\",\r\n \"description\": \"Policy to Deploy Service Health Advisory Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.1.0\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\",\r\n \"_deployed_by_amba\": true\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Action Group Email\",\r\n \"description\": \"Email address to send alerts to\"\r\n },\r\n \"defaultValue\": \"action@mail.com\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring Subscription level alerts. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Resources/subscriptions\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"deployIfNotExists\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/activityLogAlerts\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n },\r\n {\r\n \"count\": {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\r\n \"where\": {\r\n \"anyOf\": [\r\n {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\r\n \"equals\": \"category\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\r\n \"equals\": \"ServiceHealth\"\r\n }\r\n ]\r\n },\r\n {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\r\n \"equals\": \"properties.incidentType\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\r\n \"equals\": \"ActionRequired\"\r\n }\r\n ]\r\n }\r\n ]\r\n }\r\n },\r\n \"equals\": 2\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"type\": \"string\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"ALZ-SvcHealth-Health\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"microsoft.insights/activityLogAlerts\",\r\n \"apiVersion\": \"2020-10-01\",\r\n \"location\": \"global\",\r\n \"dependsOn\": [\r\n \"[[concat(subscription().Id, '/resourceGroups/', parameters('alertResourceGroupName'), '/providers/Microsoft.Insights/actionGroups/AlzActionGrp')]\"\r\n ],\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"name\": \"ServiceHealthAdvisoryEvent\",\r\n \"properties\": {\r\n \"actions\": {\r\n \"actionGroups\": [\r\n {\r\n \"actionGroupId\": \"[[concat(subscription().Id, '/resourceGroups/', parameters('alertResourceGroupName'), '/providers/Microsoft.Insights/actionGroups/AlzActionGrp')]\"\r\n }\r\n ]\r\n },\r\n \"description\": \"Service Health Advisory Alert\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().id]\"\r\n ],\r\n \"condition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"category\",\r\n \"equals\": \"ServiceHealth\"\r\n },\r\n {\r\n \"field\": \"properties.incidentType\",\r\n \"equals\": \"ActionRequired\"\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n },\r\n {\r\n \"type\": \"Microsoft.Insights/actionGroups\",\r\n \"apiVersion\": \"2022-04-01\",\r\n \"name\": \"AlzActionGrp\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"groupShortName\": \"AlzActionGrp\",\r\n \"enabled\": true,\r\n \"emailReceivers\": [\r\n {\r\n \"name\": \"AlzMail\",\r\n \"emailAddress\": \"[[parameters('ALZMonitorActionGroupEmail')]\",\r\n \"useCommonAlertSchema\": true\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#80": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ERP_ExpressRoutRxLightLevellow_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ER Direct ExpressRoute RxLightLevel Low Alert\",\r\n \"description\": \"Policy to audit/deploy ER Direct RxLightLevel Low Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"-10\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"disabled\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"RxLightLevel\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].StaticThresholdCriterion.operator\",\r\n \"equals\": \"LessThan\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-DirectERRxLightLevelLowAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ER Direct Connection RxLightLevelLow\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"RxLightLevel\",\r\n \"metricNamespace\": \"Microsoft.Network/expressRoutePorts\",\r\n \"metricName\": \"RxLightLevel\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#81": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ERP_ExpressRoutTxLightLevell_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ER Direct ExpressRoute TxLightLevel High Alert\",\r\n \"description\": \"Policy to audit/deploy ER Direct TxLightLevel High Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"0\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"disabled\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"TxLightLevel\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].StaticThresholdCriterion.operator\",\r\n \"equals\": \"GreaterThan\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-DirectERTxLightLevelHighAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ER Direct Connection TxLightLevelHigh\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"TxLightLevel\",\r\n \"metricNamespace\": \"Microsoft.Network/expressRoutePorts\",\r\n \"metricName\": \"TxLightLevel\",\r\n \"operator\": \"GreaterThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#82": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ERP_ExpressRoutTxLightLevellow_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ER Direct ExpressRoute TxLightLevel Low Alert\",\r\n \"description\": \"Policy to audit/deploy ER Direct TxLightLevel Low Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"-10\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"disabled\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/expressRoutePorts\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"TxLightLevel\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].StaticThresholdCriterion.operator\",\r\n \"equals\": \"LessThan\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-DirectERTxLightLevelLowAlert')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ER Direct Connection TxLightLevelLow\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"TxLightLevel\",\r\n \"metricNamespace\": \"Microsoft.Network/expressRoutePorts\",\r\n \"metricName\": \"TxLightLevel\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#83": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ALB_DataPathAvailability_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ALB Data Path Availability Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Load Balancer Data Path Availability Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"0\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"90\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/loadBalancers\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Network/loadBalancers/sku.name\",\r\n \"in\": [\"Standard\", \"Gateway\"]\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/loadBalancers\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"VipAvailability\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-ALBDataPathAvailability')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ALB Data Path Availability\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"VipAvailability\",\r\n \"metricNamespace\": \"Microsoft.Network/loadBalancers\",\r\n \"metricName\": \"VipAvailability\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#84": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ALB_GlobalBackendAvailability_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ALB Global Backend Availability Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Load Balancer Global Backend Availability Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"0\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"90\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/loadBalancers\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Network/loadBalancers/sku.tier\",\r\n \"equals\": \"Global\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/loadBalancers\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"GlobalBackendAvailability\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-ALBGlobalBackendAvailability')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for Global Backend Availability\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"GlobalBackendAvailability\",\r\n \"metricNamespace\": \"Microsoft.Network/loadBalancers\",\r\n \"metricName\": \"GlobalBackendAvailability\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#85": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ALB_HealthProbeStatus_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ALB Health Probe Status Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Load Balancer Health Probe Status Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"2\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"90\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/loadBalancers\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Network/loadBalancers/sku.name\",\r\n \"in\": [\"Standard\", \"Gateway\"]\r\n },\r\n {\r\n \"field\": \"Microsoft.Network/loadBalancers/sku.tier\",\r\n \"equals\": \"Regional\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/loadBalancers\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"DipAvailability\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-ALBHealthProbeStatus')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ALB Health Probe Status\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"DipAvailability\",\r\n \"metricNamespace\": \"Microsoft.Network/loadBalancers\",\r\n \"metricName\": \"DipAvailability\",\r\n \"operator\": \"LessThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#86": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_ALB_UsedSNATPorts_Alert\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy ALB Used SNAT Ports Alert\",\r\n \"description\": \"Policy to audit/deploy Azure Load Balancer Used SNAT Ports Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.0.1\",\r\n \"Category\": \"Networking\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"severity\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Severity\",\r\n \"description\": \"Severity of the Alert\"\r\n },\r\n \"allowedValues\": [\"0\", \"1\", \"2\", \"3\", \"4\"],\r\n \"defaultValue\": \"1\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"defaultValue\": \"PT5M\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n },\r\n \"allowedValues\": [\"PT1M\", \"PT5M\", \"PT15M\", \"PT30M\", \"PT1H\"],\r\n \"defaultValue\": \"PT1M\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Auto Mitigate\",\r\n \"description\": \"Auto Mitigate for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\"true\", \"false\"],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n },\r\n \"defaultValue\": \"900\"\r\n },\r\n \"effect\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Effect of the policy\"\r\n },\r\n \"allowedValues\": [\"deployIfNotExists\", \"disabled\"],\r\n \"defaultValue\": \"deployIfNotExists\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring resource. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Network/loadBalancers\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"[[parameters('effect')]\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace\",\r\n \"equals\": \"Microsoft.Network/loadBalancers\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName\",\r\n \"equals\": \"UsedSNATPorts\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricalerts/scopes[*]\",\r\n \"equals\": \"[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/metricAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceName\",\r\n \"description\": \"Name of the resource\"\r\n }\r\n },\r\n \"resourceId\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"resourceId\",\r\n \"description\": \"Resource ID of the resource emitting the metric that will be used for the comparison\"\r\n }\r\n },\r\n \"severity\": {\r\n \"type\": \"String\"\r\n },\r\n \"windowSize\": {\r\n \"type\": \"String\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"type\": \"String\"\r\n },\r\n \"autoMitigate\": {\r\n \"type\": \"String\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"String\"\r\n },\r\n \"threshold\": {\r\n \"type\": \"String\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Insights/metricAlerts\",\r\n \"apiVersion\": \"2018-03-01\",\r\n \"name\": \"[[concat(parameters('resourceName'), '-ALBUsedSNATPorts')]\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"description\": \"Metric Alert for ALB Used SNAT Ports\",\r\n \"severity\": \"[[parameters('severity')]\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\"[[parameters('resourceId')]\"],\r\n \"evaluationFrequency\": \"[[parameters('evaluationFrequency')]\",\r\n \"windowSize\": \"[[parameters('windowSize')]\",\r\n \"criteria\": {\r\n \"allOf\": [\r\n {\r\n \"name\": \"UsedSNATPorts\",\r\n \"metricNamespace\": \"Microsoft.Network/loadBalancers\",\r\n \"metricName\": \"UsedSNATPorts\",\r\n \"operator\": \"GreaterThan\",\r\n \"threshold\": \"[[parameters('threshold')]\",\r\n \"timeAggregation\": \"Average\",\r\n \"criterionType\": \"StaticThresholdCriterion\"\r\n }\r\n ],\r\n \"odata.type\": \"Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria\"\r\n },\r\n \"autoMitigate\": \"[[parameters('autoMitigate')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"resourceName\": {\r\n \"value\": \"[[field('name')]\"\r\n },\r\n \"resourceId\": {\r\n \"value\": \"[[field('id')]\"\r\n },\r\n \"severity\": {\r\n \"value\": \"[[parameters('severity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('windowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('evaluationFrequency')]\"\r\n },\r\n \"autoMitigate\": {\r\n \"value\": \"[[parameters('autoMitigate')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('threshold')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#87": { + "type": "Microsoft.Authorization/policySetDefinitions", + "apiVersion": "2021-06-01", + "name": "Alerting-Connectivity", + "properties": { + "displayName": "Deploy Azure Monitor Baseline Alerts for Connectivity", + "description": "Initiative to deploy AMBA alerts relevant to the ALZ Connectivity management group", + "metadata": { + "version": "1.0.2", + "category": "Monitoring", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "alzCloudEnvironments": [ + "AzureCloud" + ], + "_deployed_by_amba": true + }, + "parameters": { + "ALZMonitorResourceGroupName": { + "type": "String", + "defaultValue": "ALZ-Monitoring-RG", + "metadata": { + "displayName": "ALZ Monitor Resource Group Name", + "description": "Name of the resource group where the ALZ Monitor resources will be deployed" + } + }, + "ALZMonitorResourceGroupTags": { + "type": "Object", + "defaultValue": { + "_deployed_by_alz_monitor": true + }, + "metadata": { + "displayName": "ALZ Monitor Resource Group Tags", + "description": "Tags to be applied to the resource group where the ALZ Monitor resources will be deployed" + } + }, + "ALZMonitorResourceGroupLocation": { + "type": "String", + "defaultValue": "centralus", + "metadata": { + "displayName": "ALZ Monitor Resource Group Location", + "description": "Location of the resource group where the ALZ Monitor resources will be deployed" + } + }, + "ERCIRQoSDropBitsinPerSecAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Alert Severity", + "description": "Severity of the alert" + } + }, + "ERCIRQoSDropBitsinPerSecWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Window Size", + "description": "Window size for the alert" + } + }, + "ERCIRQoSDropBitsinPerSecEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERCIRQoSDropBitsinPerSecPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERCIRQoSDropBitsinPerSecAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Alert State", + "description": "Alert state for the alert" + } + }, + "ERCIRQoSDropBitsoutPerSecAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Alert Severity", + "description": "Severity of the alert" + } + }, + "ERCIRQoSDropBitsoutPerSecWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Window Size", + "description": "Window size for the alert" + } + }, + "ERCIRQoSDropBitsoutPerSecEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERCIRQoSDropBitsoutPerSecPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERCIRQoSDropBitsoutPerSecAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Alert State", + "description": "Alert state for the alert" + } + }, + "VPNGwBGPPeerStatusAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VPN Gw BGP Peer Status Alert Severity", + "description": "Severity of the alert" + } + }, + "VPNGwBGPPeerStatusWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VPN Gw BGP Peer Status Window Size", + "description": "Window size for the alert" + } + }, + "VPNGwBGPPeerStatusEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VPN Gw BGP Peer Status Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VPNGwBGPPeerStatusPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VPN Gw BGP Peer Status Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VPNGwBGPPeerStatusAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VPN Gw BGP Peer Status Alert State", + "description": "Alert state for the alert" + } + }, + "VPNGwBGPPeerStatusThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VPN Gw BGP Peer Status Threshold", + "description": "Threshold for the alert" + } + }, + "VnetGwERCpuUtilAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Alert Severity", + "description": "Severity of the alert" + } + }, + "VnetGwERCpuUtilWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Window Size", + "description": "Window size for the alert" + } + }, + "VnetGwERCpuUtilEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VnetGwERCpuUtilPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VnetGwERCpuUtilAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Alert State", + "description": "Alert state for the alert" + } + }, + "VnetGwERCpuUtilThreshold": { + "type": "string", + "defaultValue": "80", + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Threshold", + "description": "Threshold for the alert" + } + }, + "VnetGwTunnelBWAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel BW Alert Severity", + "description": "Severity of the alert" + } + }, + "VnetGwTunnelBWWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel BW Window Size", + "description": "Window size for the alert" + } + }, + "VnetGwTunnelBWEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel BW Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VnetGwTunnelBWPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel BW Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VnetGwTunnelBWAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel BW Alert State", + "description": "Alert state for the alert" + } + }, + "VnetGwTunnelBWThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "Vnet Gw Tunnel BW Threshold", + "description": "Threshold for the alert" + } + }, + "VnetGwTunnelEgressAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Alert Severity", + "description": "Severity of the alert" + } + }, + "VnetGwTunnelEgressWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Window Size", + "description": "Window size for the alert" + } + }, + "VnetGwTunnelEgressEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VnetGwTunnelEgressPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VnetGwTunnelEgressAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Alert State", + "description": "Alert state for the alert" + } + }, + "VnetGwTunnelEgressThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Threshold", + "description": "Threshold for the alert" + } + }, + "VnetGwTunnelIngressAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Alert Severity", + "description": "Severity of the alert" + } + }, + "VnetGwTunnelIngressWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Window Size", + "description": "Window size for the alert" + } + }, + "VnetGwTunnelIngressEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VnetGwTunnelIngressPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VnetGwTunnelIngressAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Alert State", + "description": "Alert state for the alert" + } + }, + "VnetGwTunnelIngressThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Threshold", + "description": "Threshold for the alert" + } + }, + "VPNGWBandWidthUtilAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VPN GW Band Width Util Alert Severity", + "description": "Severity of the alert" + } + }, + "VPNGWBandWidthUtilWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VPN GW Band Width Util Window Size", + "description": "Window size for the alert" + } + }, + "VPNGWBandWidthUtilEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VPN GW Band Width Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VPNGWBandWidthUtilPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VPN GW Band Width Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VPNGWBandWidthUtilAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Band Width Util Alert State", + "description": "Alert state for the alert" + } + }, + "VPNGWBandWidthUtilThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VPN GW Band Width Util Threshold", + "description": "Threshold for the alert" + } + }, + "VPNGWEgressAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VPN GW Egress Alert Severity", + "description": "Severity of the alert" + } + }, + "VPNGWEgressWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VPN GW Egress Window Size", + "description": "Window size for the alert" + } + }, + "VPNGWEgressEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VPN GW Egress Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VPNGWEgressPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VPN GW Egress Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VPNGWEgressAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Egress Alert State", + "description": "Alert state for the alert" + } + }, + "VPNGWEgressThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VPN GW Egress Threshold", + "description": "Threshold for the alert" + } + }, + "VPNGWTunnelEgressPacketDropCountAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Count Alert Severity", + "description": "Severity of the alert" + } + }, + "VPNGWTunnelEgressPacketDropCountWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Count Window Size", + "description": "Window size for the alert" + } + }, + "VPNGWTunnelEgressPacketDropCountFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Count Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VPNGWTunnelEgressPacketDropCountPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VPNGWTunnelEgressPacketDropCountAlertState": { + "type": "string", + "defaultValue": "true" + }, + "VPNGWTunnelEgressPacketDropMismatchAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Alert Severity", + "description": "Severity of the alert" + } + }, + "VPNGWTunnelEgressPacketDropMismatchWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Window Size", + "description": "Window size for the alert" + } + }, + "VPNGWTunnelEgressPacketDropMismatchFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VPNGWTunnelEgressPacketDropMismatchPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VPNGWTunnelEgressPacketDropMismatchAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Alert State", + "description": "Alert state for the alert" + } + }, + "VPNGWIngressAlertSeverity": { + "type": "string", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VPN GW Ingress Alert Severity", + "description": "Severity of the alert" + } + }, + "VPNGWIngressWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VPN GW Ingress Window Size", + "description": "Window size for the alert" + } + }, + "VPNGWIngressEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VPN GW Ingress Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VPNGWIngressPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VPN GW Ingress Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VPNGWIngressAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Ingress Alert State", + "description": "Alert state for the alert" + } + }, + "VPNGWIngressThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VPN GW Ingress Threshold", + "description": "Threshold for the alert" + } + }, + "VPNGWIngressAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Ingress Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VPNGWTunnelIngressPacketDropCountAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Alert Severity", + "description": "Severity of the alert" + } + }, + "VPNGWTunnelIngressPacketDropCountWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Window Size", + "description": "Window size for the alert" + } + }, + "VPNGWTunnelIngressPacketDropCountFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VPNGWTunnelIngressPacketDropCountPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VPNGWTunnelIngressPacketDropCountAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Alert State", + "description": "Alert state for the alert" + } + }, + "VPNGWTunnelIngressPacketDropMismatchAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Alert Severity", + "description": "Severity of the alert" + } + }, + "VPNGWTunnelIngressPacketDropMismatchWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Window Size", + "description": "Window size for the alert" + } + }, + "VPNGWTunnelIngressPacketDropMismatchFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VPNGWTunnelIngressPacketDropMismatchPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VPNGWTunnelIngressPacketDropMismatchAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Alert State", + "description": "Alert state for the alert" + } + }, + "PDNSZCapacityUtilAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PDNSZ Capacity Util Alert Severity", + "description": "Severity of the alert" + } + }, + "PDNSZCapacityUtilWindowSize": { + "type": "string", + "defaultValue": "PT1H", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PDNSZ Capacity Util Window Size", + "description": "Window size for the alert" + } + }, + "PDNSZCapacityUtilEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1H", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PDNSZ Capacity Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PDNSZCapacityUtilPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PDNSZ Capacity Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "PDNSZCapacityUtilAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PDNSZ Capacity Util Alert State", + "description": "Alert state for the alert" + } + }, + "PDNSZCapacityUtilThreshold": { + "type": "string", + "defaultValue": "80", + "metadata": { + "displayName": "PDNSZ Capacity Util Threshold", + "description": "Threshold for the alert" + } + }, + "PDNSZQueryVolumeAlertSeverity": { + "type": "String", + "defaultValue": "4", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PDNSZ Query Volume Alert Severity", + "description": "Severity of the alert" + } + }, + "PDNSZQueryVolumeWindowSize": { + "type": "string", + "defaultValue": "PT1H", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PDNSZ Query Volume Window Size", + "description": "Window size for the alert" + } + }, + "PDNSZQueryVolumeEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1H", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PDNSZ Query Volume Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PDNSZQueryVolumePolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PDNSZ Query Volume Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "PDNSZQueryVolumeAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PDNSZ Query Volume Alert State", + "description": "Alert state for the alert" + } + }, + "PDNSZQueryVolumeThreshold": { + "type": "string", + "defaultValue": "500", + "metadata": { + "displayName": "PDNSZ Query Volume Threshold", + "description": "Threshold for the alert" + } + }, + "PDNSZRecordSetCapacityAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PDNSZ Record Set Capacity Alert Severity", + "description": "Severity of the alert" + } + }, + "PDNSZRecordSetCapacityWindowSize": { + "type": "string", + "defaultValue": "PT1H", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PDNSZ Record Set Capacity Window Size", + "description": "Window size for the alert" + } + }, + "PDNSZRecordSetCapacityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1H", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PDNSZ Record Set Capacity Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PDNSZRecordSetCapacityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PDNSZ Record Set Capacity Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "PDNSZRecordSetCapacityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PDNSZ Record Set Capacity Alert State", + "description": "Alert state for the alert" + } + }, + "PDNSZRecordSetCapacityThreshold": { + "type": "string", + "defaultValue": "80", + "metadata": { + "displayName": "PDNSZ Record Set Capacity Threshold", + "description": "Threshold for the alert" + } + }, + "PDNSZRegistrationCapacityUtilAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Alert Severity", + "description": "Severity of the alert" + } + }, + "PDNSZRegistrationCapacityUtilWindowSize": { + "type": "string", + "defaultValue": "PT1H", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Window Size", + "description": "Window size for the alert" + } + }, + "PDNSZRegistrationCapacityUtilEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1H", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PDNSZRegistrationCapacityUtilPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "PDNSZRegistrationCapacityUtilAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Alert State", + "description": "Alert state for the alert" + } + }, + "PDNSZRegistrationCapacityUtilThreshold": { + "type": "string", + "defaultValue": "80", + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Threshold", + "description": "Threshold for the alert" + } + }, + "PIPDDoSAttackAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PIP DDoS Attack Alert Severity", + "description": "Severity of the alert" + } + }, + "PIPDDoSAttackWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PIP DDoS Attack Window Size", + "description": "Window size for the alert" + } + }, + "PIPDDoSAttackEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PIP DDoS Attack Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PIPDDoSAttackPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PIP DDoS Attack Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "PIPDDoSAttackAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PIP DDoS Attack Alert State", + "description": "Alert state for the alert" + } + }, + "PIPDDoSAttackThreshold": { + "type": "string", + "defaultValue": "0", + "metadata": { + "displayName": "PIP DDoS Attack Threshold", + "description": "Threshold for the alert" + } + }, + "PIPPacketsInDDoSAlertSeverity": { + "type": "String", + "defaultValue": "4", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PIP Packets In DDoS Alert Severity", + "description": "Severity of the alert" + } + }, + "PIPPacketsInDDoSWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PIP Packets In DDoS Window Size", + "description": "Window size for the alert" + } + }, + "PIPPacketsInDDoSEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PIP Packets In DDoS Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PIPPacketsInDDoSPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PIP Packets In DDoS Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "PIPPacketsInDDoSAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PIP Packets In DDoS Alert State", + "description": "Alert state for the alert" + } + }, + "PIPPacketsInDDoSThreshold": { + "type": "string", + "defaultValue": "40000", + "metadata": { + "displayName": "PIP Packets In DDoS Threshold", + "description": "Threshold for the alert" + } + }, + "PIPVIPAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PIP VIP Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "PIPVIPAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PIP VIP Availability Window Size", + "description": "Window size for the alert" + } + }, + "PIPVIPAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PIP VIP Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PIPVIPAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PIP VIP Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "PIPVIPAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PIP VIP Availability Alert State", + "description": "Alert state for the alert" + } + }, + "PIPVIPAvailabilityThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "PIP VIP Availability Threshold", + "description": "Threshold for the alert" + } + }, + "PIPBytesInDDoSAlertSeverity": { + "type": "String", + "defaultValue": "4", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Alert Severity", + "description": "Severity of the alert" + } + }, + "PIPBytesInDDoSWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Window Size", + "description": "Window size for the alert" + } + }, + "PIPBytesInDDoSEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PIPBytesInDDoSPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "PIPBytesInDDoSAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PIP Bytes In DDoS Alert State", + "description": "Alert state for the alert" + } + }, + "PIPBytesInDDoSThreshold": { + "type": "string", + "defaultValue": "8000000", + "metadata": { + "displayName": "PIP Bytes In DDoS Threshold", + "description": "Threshold for the alert" + } + }, + "ERGwExpressRouteBitsInAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ER Gw Express Route Bits In Alert Severity", + "description": "Severity of the alert" + } + }, + "ERGwExpressRouteBitsInWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ER Gw Express Route Bits In Window Size", + "description": "Window size for the alert" + } + }, + "ERGwExpressRouteBitsInEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ER Gw Express Route Bits In Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERGwExpressRouteBitsInPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ER Gw Express Route Bits In Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERGwExpressRouteBitsInAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ER Gw Express Route Bits In Alert State", + "description": "Alert state for the alert" + } + }, + "ERGwExpressRouteBitsInThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "ER Gw Express Route Bits In Threshold", + "description": "Threshold for the alert" + } + }, + "ERGwExpressRouteBitsOutAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ER Gw Express Route Bits Out Alert Severity", + "description": "Severity of the alert" + } + }, + "ERGwExpressRouteBitsOutWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ER Gw Express Route Bits Out Window Size", + "description": "Window size for the alert" + } + }, + "ERGwExpressRouteBitsOutEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ER Gw Express Route Bits Out Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERGwExpressRouteBitsOutPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ER Gw Express Route Bits Out Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERGwExpressRouteBitsOutAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ER Gw Express Route Bits Out Alert State", + "description": "Alert state for the alert" + } + }, + "ERGwExpressRouteBitsOutThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "ER Gw Express Route Bits Out Threshold", + "description": "Threshold for the alert" + } + }, + "ERGwExpressRouteCpuUtilAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Alert Severity", + "description": "Severity of the alert" + } + }, + "ERGwExpressRouteCpuUtilWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Window Size", + "description": "Window size for the alert" + } + }, + "ERGwExpressRouteCpuUtilEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERGwExpressRouteCpuUtilPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERGwExpressRouteCpuUtilAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Alert State", + "description": "Alert state for the alert" + } + }, + "ERGwExpressRouteCpuUtilThreshold": { + "type": "string", + "defaultValue": "80", + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Threshold", + "description": "Threshold for the alert" + } + }, + "VNETDDOSAttackAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VNET DDoS Attack Alert Severity", + "description": "Severity of the alert" + } + }, + "VNETDDOSAttackWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VNET DDoS Attack Window Size", + "description": "Window size for the alert" + } + }, + "VNETDDOSAttackEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VNET DDoS Attack Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VNETDDOSAttackPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VNET DDoS Attack Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VNETDDOSAttackAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VNET DDoS Attack Alert State", + "description": "Alert state for the alert" + } + }, + "VNETDDOSAttackThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VNET DDoS Attack Threshold", + "description": "Threshold for the alert" + } + }, + "VnetGwTunnelEgressPacketDropCountAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Alert Severity", + "description": "Severity of the alert" + } + }, + "VnetGwTunnelEgressPacketDropCountWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Window Size", + "description": "Window size for the alert" + } + }, + "VnetGwTunnelEgressPacketDropCountEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VnetGwTunnelEgressPacketDropCountPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VnetGwTunnelEgressPacketDropCountAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Alert State", + "description": "Alert state for the alert" + } + }, + "VnetGwTunnelEgressPacketDropMismatchAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Alert Severity", + "description": "Severity of the alert" + } + }, + "VnetGwTunnelEgressPacketDropMismatchWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Window Size", + "description": "Window size for the alert" + } + }, + "VnetGwTunnelEgressPacketDropMismatchEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VnetGwTunnelEgressPacketDropMismatchPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VnetGwTunnelEgressPacketDropMismatchAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Alert State", + "description": "Alert state for the alert" + } + }, + "VnetGwExpressRouteBitsPerSecondAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Alert Severity", + "description": "Severity of the alert" + } + }, + "VnetGwExpressRouteBitsPerSecondWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Window Size", + "description": "Window size for the alert" + } + }, + "VnetGwExpressRouteBitsPerSecondEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VnetGwExpressRouteBitsPerSecondPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VnetGwExpressRouteBitsPerSecondAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Alert State", + "description": "Alert state for the alert" + } + }, + "VnetGwExpressRouteBitsPerSecondThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Threshold", + "description": "Threshold for the alert" + } + }, + "VnetGwTunnelIngressPacketDropMismatchAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Alert Severity", + "description": "Severity of the alert" + } + }, + "VnetGwTunnelIngressPacketDropMismatchWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Window Size", + "description": "Window size for the alert" + } + }, + "VnetGwTunnelIngressPacketDropMismatchEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VnetGwTunnelIngressPacketDropMismatchPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VnetGwTunnelIngressPacketDropMismatchAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Alert State", + "description": "Alert state for the alert" + } + }, + "VnetGwTunnelIngressPacketDropCountAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Alert Severity", + "description": "Severity of the alert" + } + }, + "VnetGwTunnelIngressPacketDropCountWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Window Size", + "description": "Window size for the alert" + } + }, + "VnetGwTunnelIngressPacketDropCountEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VnetGwTunnelIngressPacketDropCountPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "VnetGwTunnelIngressPacketDropCountAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Alert State", + "description": "Alert state for the alert" + } + }, + "ERCIRBgpAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERCIR Bgp Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "ERCIRBgpAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERCIR Bgp Availability Window Size", + "description": "Window size for the alert" + } + }, + "ERCIRBgpAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERCIR Bgp Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERCIRBgpAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERCIR Bgp Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERCIRBgpAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERCIR Bgp Availability Alert State", + "description": "Alert state for the alert" + } + }, + "ERCIRBgpAvailabilityThreshold": { + "type": "string", + "defaultValue": "90", + "metadata": { + "displayName": "ERCIR Bgp Availability Threshold", + "description": "Threshold for the alert" + } + }, + "ERCIRArpAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERCIR Arp Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "ERCIRArpAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERCIR Arp Availability Window Size", + "description": "Window size for the alert" + } + }, + "ERCIRArpAvailabilityFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERCIR Arp Availability Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERCIRArpAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERCIR ARP Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERCIRArpAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERCIR Arp Availability Alert State", + "description": "Alert state for the alert" + } + }, + "ERCIRArpAvailabilityThreshold": { + "type": "string", + "defaultValue": "90", + "metadata": { + "displayName": "ERCIR Arp Availability Threshold", + "description": "Threshold for the alert" + } + }, + "AFWSNATPortUtilizationAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "AFW SNAT Port Utilization Alert Severity", + "description": "Severity of the alert" + } + }, + "AFWSNATPortUtilizationWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AFW SNAT Port Utilization Window Size", + "description": "Window size for the alert" + } + }, + "AFWSNATPortUtilizationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "AFW SNAT Port Utilization Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AFWSNATPortUtilizationPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "AFW SNAT Port Utilization Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AFWSNATPortUtilizationAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AFW SNAT Port Utilization Alert State", + "description": "Alert state for the alert" + } + }, + "AFWSNATPortUtilizationThreshold": { + "type": "string", + "defaultValue": "80", + "metadata": { + "displayName": "AFW SNAT Port Utilization Threshold", + "description": "Threshold for the alert" + } + }, + "FirewallHealthAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Firewall Health Alert Severity", + "description": "Severity of the alert" + } + }, + "FirewallHealthWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Firewall Health Window Size", + "description": "Window size for the alert" + } + }, + "FirewallHealthEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Firewall Health Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "FirewallHealthPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Firewall Health Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "FirewallHealthAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Firewall Health Alert State", + "description": "Alert state for the alert" + } + }, + "FirewallHealthThreshold": { + "type": "string", + "defaultValue": "90", + "metadata": { + "displayName": "Firewall Health Threshold", + "description": "Threshold for the alert" + } + }, + "activityFWDeleteAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Activity FW Delete Alert State", + "description": "Alert state for the alert" + } + }, + "activityNSGDeleteAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Activity NSG Delete Alert State", + "description": "Alert state for the alert" + } + }, + "activityUDRUpdateAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Activity UDR Update Alert State", + "description": "Alert state for the alert" + } + }, + "activityVPNGWDeleteAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Activity VPN GW Delete Alert State", + "description": "Alert state for the alert" + } + }, + "LBDatapathAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Data path Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "LBDatapathAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Data path Availability Window Size", + "description": "Window size for the alert" + } + }, + "LBDatapathAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Data path Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBDatapathAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Data path Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBDatapathAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Data path Availability Alert State", + "description": "Alert state for the alert" + } + }, + "LBGlobalBackendAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Global Backend Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "LBGlobalBackendAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Global Backend Availability Window Size", + "description": "Window size for the alert" + } + }, + "LBGlobalBackendAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Global Backend Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBGlobalBackendAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Global Backend Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBGlobalBackendAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Global Backend Availability Alert State", + "description": "Alert state for the alert" + } + }, + "LBHealthProbeStatusAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Health Probe Status Alert Severity", + "description": "Severity of the alert" + } + }, + "LBHealthProbeStatusWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Health Probe Status Window Size", + "description": "Window size for the alert" + } + }, + "LBHealthProbeStatusEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Health Probe Status Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBHealthProbeStatusPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Health Probe Status Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBHealthProbeStatusAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Health Probe Status Alert State", + "description": "Alert state for the alert" + } + }, + "LBUsedSNATPortsAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Alert Severity", + "description": "Severity of the alert" + } + }, + "LBUsedSNATPortsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Window Size", + "description": "Window size for the alert" + } + }, + "LBUsedSNATPortsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBUsedSNATPortsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBUsedSNATPortsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Used SNAT Ports Alert State", + "description": "Alert state for the alert" + } + }, + "ERPBitsInPerSecondAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Bits In Per Second Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPBitsInPerSecondWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Bits In Per Second Window Size", + "description": "Window size for the alert" + } + }, + "ERPBitsInPerSecondEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Bits In Per Second Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPBitsInPerSecondPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Bits In Per Second Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPBitsInPerSecondAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Bits In Per Second Alert State", + "description": "Alert state for the alert" + } + }, + "ERPBitsOutPerSecondAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Bits Out Per Second Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPBitsOutPerSecondWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Bits Out Per Second Window Size", + "description": "Window size for the alert" + } + }, + "ERPBitsOutPerSecondEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Bits Out Per Second Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPBitsOutPerSecondPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Bits Out Per Second Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPBitsOutPerSecondAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Bits Out Per Second Alert State", + "description": "Alert state for the alert" + } + }, + "ERPLineProtocolAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Line Protocol Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPLineProtocolWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Line Protocol Window Size", + "description": "Window size for the alert" + } + }, + "ERPLineProtocolEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Line Protocol Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPLineProtocolPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Line Protocol Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPLineProtocolAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Line Protocol Alert State", + "description": "Alert state for the alert" + } + }, + "ERPRxLightLevelHighAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Rx Light Level High Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPRxLightLevelHighWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Rx Light Level High Window Size", + "description": "Window size for the alert" + } + }, + "ERPRxLightLevelHighEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Rx Light Level High Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPRxLightLevelHighPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Rx Light Level High Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPRxLightLevelHighAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Rx Light Level High Alert State", + "description": "Alert state for the alert" + } + }, + "ERPRxLightLevelLowAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Rx Light Level Low Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPRxLightLevelLowWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Rx Light Level Low Window Size", + "description": "Window size for the alert" + } + }, + "ERPRxLightLevelLowEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Rx Light Level Low Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPRxLightLevelLowPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Rx Light Level Low Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPRxLightLevelLowAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Rx Light Level Low Alert State", + "description": "Alert state for the alert" + } + }, + "ERPTxLightLevelHighAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Tx Light Level High Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPTxLightLevelHighWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Tx Light Level High Window Size", + "description": "Window size for the alert" + } + }, + "ERPTxLightLevelHighEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Tx Light Level High Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPTxLightLevelHighPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Tx Light Level High Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPTxLightLevelHighAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Tx Light Level High Alert State", + "description": "Alert state for the alert" + } + }, + "ERPTxLightLevelLowAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Tx Light Level Low Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPTxLightLevelLowWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Tx Light Level Low Window Size", + "description": "Window size for the alert" + } + }, + "ERPTxLightLevelLowEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Tx Light Level Low Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPTxLightLevelLowPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Tx Light Level Low Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPTxLightLevelLowAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Tx Light Level Low Alert State", + "description": "Alert state for the alert" + } + } + }, + "policyDefinitions": [ + { + "policyDefinitionReferenceId": "ALZ_ERCIRQoSDropBitsinPerSec", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERCIR_QosDropBitsInPerSecond_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERCIRQoSDropBitsinPerSecAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERCIRQoSDropBitsinPerSecWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERCIRQoSDropBitsinPerSecEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERCIRQoSDropBitsinPerSecPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERCIRQoSDropBitsinPerSecAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERCIRQoSDropBitsoutPerSec", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERCIR_QosDropBitsOutPerSecond_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERCIRQoSDropBitsoutPerSecAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERCIRQoSDropBitsoutPerSecWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERCIRQoSDropBitsoutPerSecEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERCIRQoSDropBitsoutPerSecPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERCIRQoSDropBitsoutPerSecAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VPNGwBGPPeerStatus", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_BGPPeerStatus_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VPNGwBGPPeerStatusAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VPNGwBGPPeerStatusWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VPNGwBGPPeerStatusEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VPNGwBGPPeerStatusPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VPNGwBGPPeerStatusAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VPNGwBGPPeerStatusThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VnetGwERCpuUtil", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_ExpressRouteCpuUtil_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VnetGwERCpuUtilAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VnetGwERCpuUtilWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VnetGwERCpuUtilEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VnetGwERCpuUtilPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VnetGwERCpuUtilAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VnetGwERCpuUtilThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VnetGwTunnelBW", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelBandwidth_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VnetGwTunnelBWAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VnetGwTunnelBWWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VnetGwTunnelBWEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VnetGwTunnelBWPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VnetGwTunnelBWAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VnetGwTunnelBWThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VnetGwTunnelEgress", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelEgress_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VnetGwTunnelEgressAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VnetGwTunnelEgressWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VnetGwTunnelEgressEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VnetGwTunnelEgressPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VnetGwTunnelEgressAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VnetGwTunnelEgressThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VnetGwTunnelIngress", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelIngress_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VnetGwTunnelIngressAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VnetGwTunnelIngressWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VnetGwTunnelIngressEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VnetGwTunnelIngressPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VnetGwTunnelIngressAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VnetGwTunnelIngressThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VPNGWBandWidthUtil", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_BandwidthUtil_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VPNGWBandWidthUtilAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VPNGWBandWidthUtilWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VPNGWBandWidthUtilEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VPNGWBandWidthUtilPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VPNGWBandWidthUtilAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VPNGWBandWidthUtilThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VPNGWEgress", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_Egress_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VPNGWEgressAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VPNGWEgressWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VPNGWEgressEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VPNGWEgressPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VPNGWEgressAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VPNGWEgressThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VPNGWTunnelEgressPacketDropCount", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_TunnelEgressPacketDropCount_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropCountAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropCountWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropCountFrequency')]" + }, + "effect": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropCountPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropCountAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VPNGWTunnelEgressPacketDropMismatch", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_TunnelEgressPacketDropMismatch_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropMismatchAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropMismatchWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropMismatchFrequency')]" + }, + "effect": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropMismatchPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VPNGWTunnelEgressPacketDropMismatchAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VPNGWIngress", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_Ingress_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VPNGWIngressAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VPNGWIngressWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VPNGWIngressEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VPNGWIngressPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VPNGWIngressAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VPNGWIngressThreshold')]" + }, + "autoMitigate": { + "value": "[[[parameters('VPNGWIngressAutoMitigate')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VPNGWTunnelIngressPacketDropCount", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_TunnelIngressPacketDropCount_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropCountAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropCountWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropCountFrequency')]" + }, + "effect": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropCountPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropCountAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VPNGWTunnelIngressPacketDropMismatch", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VPNGw_TunnelIngressPacketDropMismatch_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropMismatchAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropMismatchWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropMismatchFrequency')]" + }, + "effect": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropMismatchPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VPNGWTunnelIngressPacketDropMismatchAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PDNSZCapacityUtil", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PDNSZ_CapacityUtil_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PDNSZCapacityUtilAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PDNSZCapacityUtilWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PDNSZCapacityUtilEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PDNSZCapacityUtilPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PDNSZCapacityUtilAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PDNSZCapacityUtilThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PDNSZQueryVolume", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PDNSZ_QueryVolume_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PDNSZQueryVolumeAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PDNSZQueryVolumeWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PDNSZQueryVolumeEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PDNSZQueryVolumePolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PDNSZQueryVolumeAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PDNSZQueryVolumeThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PDNSZRecordSetCapacity", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PDNSZ_RecordSetCapacity_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PDNSZRecordSetCapacityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PDNSZRecordSetCapacityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PDNSZRecordSetCapacityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PDNSZRecordSetCapacityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PDNSZRecordSetCapacityAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PDNSZRecordSetCapacityThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PDNSZRegistrationCapacityUtil", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_DNSZ_RegistrationCapacityUtil_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PDNSZRegistrationCapacityUtilAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PDNSZRegistrationCapacityUtilWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PDNSZRegistrationCapacityUtilEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PDNSZRegistrationCapacityUtilPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PDNSZRegistrationCapacityUtilAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PDNSZRegistrationCapacityUtilThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERGwExpressRouteBitsIn", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERGw_ExpressRouteBitsIn_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERGwExpressRouteBitsInAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERGwExpressRouteBitsInWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERGwExpressRouteBitsInEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERGwExpressRouteBitsInPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERGwExpressRouteBitsInAlertState')]" + }, + "threshold": { + "value": "[[[parameters('ERGwExpressRouteBitsInThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERGwExpressRouteBitsOut", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERGw_ExpressRouteBitsOut_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERGwExpressRouteBitsOutAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERGwExpressRouteBitsOutWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERGwExpressRouteBitsOutEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERGwExpressRouteBitsOutPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERGwExpressRouteBitsOutAlertState')]" + }, + "threshold": { + "value": "[[[parameters('ERGwExpressRouteBitsOutThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERGwExpressRouteCpuUtil", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERGw_ExpressRouteCpuUtil_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERGwExpressRouteCpuUtilAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERGwExpressRouteCpuUtilWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERGwExpressRouteCpuUtilEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERGwExpressRouteCpuUtilPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERGwExpressRouteCpuUtilAlertState')]" + }, + "threshold": { + "value": "[[[parameters('ERGwExpressRouteCpuUtilThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VnetGwTunnelEgressPacketDropCount", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelEgressPacketDropCount_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropCountAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropCountWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropCountEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropCountPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropCountAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VnetGwTunnelEgressPacketDropMismatch", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelEgressPacketDropMismatch_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropMismatchAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropMismatchWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropMismatchEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropMismatchPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VnetGwTunnelEgressPacketDropMismatchAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VnetGwExpressRouteBitsPerSecond", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_ExpressRouteBitsPerSecond_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VnetGwExpressRouteBitsPerSecondAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VnetGwExpressRouteBitsPerSecondWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VnetGwExpressRouteBitsPerSecondEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VnetGwExpressRouteBitsPerSecondPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VnetGwExpressRouteBitsPerSecondAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VnetGwExpressRouteBitsPerSecondThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VnetGwTunnelIngressPacketDropMismatchWindowSize", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelIngressPacketDropMismatch_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropMismatchAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropMismatchWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropMismatchEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropMismatchPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropMismatchAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VnetGwTunnelIngressPacketDropCountWindowSize", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VnetGw_TunnelIngressPacketDropCount_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropCountAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropCountWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropCountEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropCountPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VnetGwTunnelIngressPacketDropCountAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERCIRBgpAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERCIR_BgpAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERCIRBgpAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERCIRBgpAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERCIRBgpAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERCIRBgpAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERCIRBgpAvailabilityAlertState')]" + }, + "threshold": { + "value": "[[[parameters('ERCIRBgpAvailabilityThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERCIRArpAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERCIR_ArpAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERCIRArpAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERCIRArpAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERCIRArpAvailabilityFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERCIRArpAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERCIRArpAvailabilityAlertState')]" + }, + "threshold": { + "value": "[[[parameters('ERCIRArpAvailabilityThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AFWSNATPortUtilization", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AFW_SNATPortUtilization_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('AFWSNATPortUtilizationAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('AFWSNATPortUtilizationWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('AFWSNATPortUtilizationFrequency')]" + }, + "effect": { + "value": "[[[parameters('AFWSNATPortUtilizationPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('AFWSNATPortUtilizationAlertState')]" + }, + "threshold": { + "value": "[[[parameters('AFWSNATPortUtilizationThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PIPBytesInDDoSEvaluationFrequency", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_BytesInDDoSAttack_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PIPBytesInDDoSAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PIPBytesInDDoSWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PIPBytesInDDoSEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PIPBytesInDDoSPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PIPBytesInDDoSAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PIPBytesInDDoSThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PIPDDoSAttack", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_DDoSAttack_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PIPDDoSAttackAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PIPDDoSAttackWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PIPDDoSAttackEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PIPDDoSAttackPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PIPDDoSAttackAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PIPDDoSAttackThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PIPPacketsInDDoS", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_PacketsInDDoSAttack_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PIPPacketsInDDoSAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PIPPacketsInDDoSWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PIPPacketsInDDoSEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PIPPacketsInDDoSPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PIPPacketsInDDoSAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PIPPacketsInDDoSThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PIPVIPAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_VIPAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PIPVIPAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PIPVIPAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PIPVIPAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PIPVIPAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PIPVIPAvailabilityAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PIPVIPAvailabilityThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VNETDDOSAttack", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VNET_DDoSAttack_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VNETDDOSAttackAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VNETDDOSAttackWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VNETDDOSAttackEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VNETDDOSAttackPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VNETDDOSAttackAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VNETDDOSAttackThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_FirewallHealth", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AFW_FirewallHealth_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('FirewallHealthAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('FirewallHealthWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('FirewallHealthEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('FirewallHealthPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('FirewallHealthAlertState')]" + }, + "threshold": { + "value": "[[[parameters('FirewallHealthThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_activityFWDelete", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_Firewall_Delete')]", + "parameters": { + "enabled": { + "value": "[[[parameters('activityFWDeleteAlertState')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_activityNSGDelete", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_NSG_Delete')]", + "parameters": { + "enabled": { + "value": "[[[parameters('activityNSGDeleteAlertState')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_activityUDRUpdate", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_RouteTable_Update')]", + "parameters": { + "enabled": { + "value": "[[[parameters('activityUDRUpdateAlertState')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_activityVPNGWDelete", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_VPNGateway_Delete')]", + "parameters": { + "enabled": { + "value": "[[[parameters('activityVPNGWDeleteAlertState')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBDataPathAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_DataPathAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('LBDataPathAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('LBDataPathAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('LBDataPathAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('LBDataPathAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('LBDataPathAvailabilityAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBGlobalBackendAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_GlobalBackendAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('LBGlobalBackendAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('LBGlobalBackendAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('LBGlobalBackendAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('LBGlobalBackendAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('LBGlobalBackendAvailabilityAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBHealthProbeStatus", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_HealthProbeStatus_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('LBHealthProbeStatusAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('LBHealthProbeStatusWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('LBHealthProbeStatusEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('LBHealthProbeStatusPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('LBHealthProbeStatusAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBUsedSNATPorts", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_UsedSNATPorts_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('LBUsedSNATPortsAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('LBUsedSNATPortsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('LBUsedSNATPortsEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('LBUsedSNATPortsPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('LBUsedSNATPortsAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPBitsInPerSecond", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRouteBitsIn_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERPBitsInPerSecondAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERPBitsInPerSecondWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERPBitsInPerSecondEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERPBitsInPerSecondPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERPBitsInPerSecondAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPBitsOutPerSecond", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRouteBitsOut_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERPBitsOutPerSecondAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERPBitsOutPerSecondWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERPBitsOutPerSecondEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERPBitsOutPerSecondPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERPBitsOutPerSecondAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPLineProtocol", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutLineProtocol_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERPLineProtocolAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERPLineProtocolWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERPLineProtocolEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERPLineProtocolPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERPLineProtocolAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPRxLightLevelHigh", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutRxLightLevell_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERPRxLightLevelHighAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERPRxLightLevelHighWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERPRxLightLevelHighEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERPRxLightLevelHighPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERPRxLightLevelHighAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPRxLightLevelLow", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutRxLightLevellow_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERPRxLightLevelLowAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERPRxLightLevelLowWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERPRxLightLevelLowEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERPRxLightLevelLowPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERPRxLightLevelLowAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPTxLightLevelHigh", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutTxLightLevell_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERPTxLightLevelHighAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERPTxLightLevelHighWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERPTxLightLevelHighEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERPTxLightLevelHighPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERPTxLightLevelHighAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPTxLightLevelLow", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutTxLightLevellow_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('ERPTxLightLevelLowAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('ERPTxLightLevelLowWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('ERPTxLightLevelLowEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('ERPTxLightLevelLowPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('ERPTxLightLevelLowAlertState')]" + } + } + } + ], + "policyType": "Custom", + "policyDefinitionGroups": null + } + }, + "$fxv#88": "{\r\n \"type\": \"Microsoft.Authorization/policySetDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Alerting-Identity\",\r\n \"properties\": {\r\n \"displayName\": \"Deploy Azure Monitor Baseline Alerts for Identity\",\r\n \"description\": \"Initiative to deploy AMBA alerts relevant to the ALZ Identity management group\",\r\n \"metadata\": {\r\n \"version\": \"1.0.2\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": true\r\n },\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"ALZ-Monitoring-RG\",\r\n \"metadata\": {\r\n \"displayName\": \"ALZ Monitor Resource Group Name\",\r\n \"description\": \"Name of the resource group where the alerting resources will be deployed\"\r\n }\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"defaultValue\": {\r\n \"_deployed_by_alz_monitor\": true\r\n },\r\n \"metadata\": {\r\n \"displayName\": \"ALZ Monitor Resource Group Tags\",\r\n \"description\": \"Tags for the resource group where the alerting resources will be deployed\"\r\n }\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"centralus\",\r\n \"metadata\": {\r\n \"displayName\": \"ALZ Monitor Resource Group Location\",\r\n \"description\": \"Location of the resource group where the alerting resources will be deployed\"\r\n }\r\n },\r\n \"KVRequestAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Request Alert Severity\",\r\n \"description\": \"Severity of the alert\"\r\n }\r\n },\r\n \"KVRequestWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Request Alert Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n }\r\n },\r\n \"KVRequestEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Request Alert Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n }\r\n },\r\n \"KVRequestPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Request Alert Policy Effect\",\r\n \"description\": \"Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert\"\r\n }\r\n },\r\n \"KVRequestAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Request Alert State\",\r\n \"description\": \"State of the alert, true will enable the alert, false will disable the alert\"\r\n }\r\n },\r\n \"KvAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Availability Alert Severity\",\r\n \"description\": \"Severity of the alert\"\r\n }\r\n },\r\n \"KvAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Availability Alert Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n }\r\n },\r\n \"KvAvailabilityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Availability Alert Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n }\r\n },\r\n \"KvAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Availability Alert Policy Effect\",\r\n \"description\": \"Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert\"\r\n }\r\n },\r\n \"KvAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Availability Alert State\",\r\n \"description\": \"State of the alert, true will enable the alert, false will disable the alert\"\r\n }\r\n },\r\n \"KVAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"20\",\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Availability Alert Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n }\r\n },\r\n \"KvLatencyAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"3\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Latency Alert Severity\",\r\n \"description\": \"Severity of the alert\"\r\n }\r\n },\r\n \"KvLatencyAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Latency Alert Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n }\r\n },\r\n \"KvLatencyAvailabilityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Latency Alert Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n }\r\n },\r\n \"KvLatencyAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Latency Alert Policy Effect\",\r\n \"description\": \"Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert\"\r\n }\r\n },\r\n \"KvLatencyAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Latency Alert State\",\r\n \"description\": \"State of the alert, true will enable the alert, false will disable the alert\"\r\n }\r\n },\r\n \"KvLatencyAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"1000\",\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Latency Alert Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n }\r\n },\r\n \"KVCapacityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Capacity Alert Severity\",\r\n \"description\": \"Severity of the alert\"\r\n }\r\n },\r\n \"KVCapacityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Capacity Alert Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n }\r\n },\r\n \"KVCapacityEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Capacity Alert Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n }\r\n },\r\n \"KVCapacityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"disabled\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Capacity Alert Policy Effect\",\r\n \"description\": \"Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert\"\r\n }\r\n },\r\n \"KVCapacityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Capacity Alert State\",\r\n \"description\": \"State of the alert, true will enable the alert, false will disable the alert\"\r\n }\r\n },\r\n \"KVCapacityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"75\",\r\n \"metadata\": {\r\n \"displayName\": \"KeyVault Capacity Alert Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n }\r\n },\r\n \"activityKVDeleteAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"Activity Log KeyVault Delete Alert State\",\r\n \"description\": \"State of the alert, true will enable the alert, false will disable the alert\"\r\n }\r\n }\r\n },\r\n \"policyDefinitions\": [\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KVRequest\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Requests_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KVRequestAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KVRequestWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KVRequestEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KVRequestPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KVRequestAlertState')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KvAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Availability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KvAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KvAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KvAvailabilityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KvAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KvAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('KVAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KvLatencyAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Latency_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('KvLatencyAvailabilityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_KVCapacity\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Capacity_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('KVCapacityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('KVCapacityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('KVCapacityEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('KVCapacityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('KVCapacityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('KVCapacityThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityKVDelete\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_KeyVault_Delete')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityKVDeleteAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n }\r\n ],\r\n \"policyType\": \"Custom\",\r\n \"policyDefinitionGroups\": null\r\n }\r\n}\r\n", + "$fxv#89": { + "type": "Microsoft.Authorization/policySetDefinitions", + "apiVersion": "2021-06-01", + "name": "Alerting-LandingZone", + "properties": { + "displayName": "Deploy Azure Monitor Baseline Alerts for Landing Zone", + "description": "Initiative to deploy AMBA alerts relevant to the ALZ LandingZone management group", + "metadata": { + "version": "1.0.2", + "category": "Monitoring", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "alzCloudEnvironments": [ + "AzureCloud" + ], + "_deployed_by_amba": true + }, + "parameters": { + "ALZMonitorResourceGroupName": { + "type": "String", + "defaultValue": "ALZ-Monitoring-RG", + "metadata": { + "displayName": "ALZ Monitor Resource Group Name", + "description": "Name of the resource group where the ALZ Monitor resources will be deployed" + } + }, + "ALZMonitorResourceGroupTags": { + "type": "Object", + "defaultValue": { + "_deployed_by_alz_monitor": true + }, + "metadata": { + "displayName": "ALZ Monitor Resource Group Tags", + "description": "Tags for the resource group where the ALZ Monitor resources will be deployed" + } + }, + "ALZMonitorResourceGroupLocation": { + "type": "String", + "defaultValue": "centralus", + "metadata": { + "displayName": "ALZ Monitor Resource Group Location", + "description": "Location of the resource group where the ALZ Monitor resources will be deployed" + } + }, + "KVRequestAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Key Vault Request Alert Severity", + "description": "Severity of the alert for Key Vault Request" + } + }, + "KVRequestWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Key Vault Request Window Size", + "description": "Window size for the alert" + } + }, + "KVRequestEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Key Vault Request Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "KVRequestPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Key Vault Request Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "KVRequestAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Key Vault Request Alert State", + "description": "Alert state for the alert" + } + }, + "KvAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Key Vault Availability Alert Severity", + "description": "Severity of the alert for Key Vault Availability" + } + }, + "KvAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Key Vault Availability Window Size", + "description": "Window size for the alert" + } + }, + "KvAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Key Vault Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "KvAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Key Vault Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "KvAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Key Vault Availability Alert State", + "description": "Alert state for the alert" + } + }, + "KVAvailabilityThreshold": { + "type": "string", + "defaultValue": "20", + "metadata": { + "displayName": "Key Vault Availability Threshold", + "description": "Threshold for the alert" + } + }, + "KvLatencyAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "3", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Key Vault Latency Availability Alert Severity", + "description": "Severity of the alert for Key Vault Latency Availability" + } + }, + "KvLatencyAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Key Vault Latency Availability Window Size", + "description": "Window size for the alert" + } + }, + "KvLatencyAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Key Vault Latency Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "KvLatencyAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Key Vault Latency Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "KvLatencyAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Key Vault Latency Availability Alert State", + "description": "Alert state for the alert" + } + }, + "KvLatencyAvailabilityThreshold": { + "type": "string", + "defaultValue": "1000", + "metadata": { + "displayName": "Key Vault Latency Availability Threshold", + "description": "Threshold for the alert" + } + }, + "KVCapacityAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Key Vault Capacity Alert Severity", + "description": "Severity of the alert for Key Vault Capacity" + } + }, + "KVCapacityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Key Vault Capacity Window Size", + "description": "Window size for the alert" + } + }, + "KVCapacityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Key Vault Capacity Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "KVCapacityPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Key Vault Capacity Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "KVCapacityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Key Vault Capacity Alert State", + "description": "Alert state for the alert" + } + }, + "KVCapacityThreshold": { + "type": "string", + "defaultValue": "75", + "metadata": { + "displayName": "Key Vault Capacity Threshold", + "description": "Threshold for the alert" + } + }, + "activityKVDeleteAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Activity Key Vault Delete Alert State", + "description": "Alert state for the alert" + } + }, + "StorageAccountAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "Storage Account Availability Alert Severity", + "description": "Severity of the alert for Storage Account Availability" + } + }, + "StorageAccountAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "Storage Account Availability Window Size", + "description": "Window size for the alert" + } + }, + "StorageAccountAvailabilityFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "Storage Account Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "StorageAccountAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "Storage Account Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "StorageAccountAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Storage Account Availability Alert State", + "description": "Alert state for the alert" + } + }, + "StorageAccountAvailabilityThreshold": { + "type": "string", + "defaultValue": "90", + "metadata": { + "displayName": "Storage Account Availability Threshold", + "description": "Threshold for the alert" + } + }, + "PIPDDoSAttackAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PIP DDoS Attack Alert Severity", + "description": "Severity of the alert for PIP DDoS Attack" + } + }, + "PIPDDoSAttackWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PIP DDoS Attack Window Size", + "description": "Window size for the alert" + } + }, + "PIPDDoSAttackEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PIP DDoS Attack Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PIPDDoSAttackPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PIP DDoS Attack Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "PIPDDoSAttackAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PIP DDoS Attack Alert State", + "description": "Alert state for the alert" + } + }, + "PIPDDoSAttackThreshold": { + "type": "string", + "defaultValue": "0", + "metadata": { + "displayName": "PIP DDoS Attack Threshold", + "description": "Threshold for the alert" + } + }, + "PIPPacketsInDDoSAlertSeverity": { + "type": "String", + "defaultValue": "4", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PIP Packets In DDoS Alert Severity", + "description": "Severity of the alert for PIP Packets In DDoS" + } + }, + "PIPPacketsInDDoSWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PIP Packets In DDoS Window Size", + "description": "Window size for the alert" + } + }, + "PIPPacketsInDDoSEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PIP Packets In DDoS Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PIPPacketsInDDoSPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PIP Packets In DDoS Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "PIPPacketsInDDoSAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PIP Packets In DDoS Alert State", + "description": "Alert state for the alert" + } + }, + "PIPPacketsInDDoSThreshold": { + "type": "string", + "defaultValue": "40000", + "metadata": { + "displayName": "PIP Packets In DDoS Threshold", + "description": "Threshold for the alert" + } + }, + "PIPVIPAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PIP VIP Availability Alert Severity", + "description": "Severity of the alert for PIP VIP Availability" + } + }, + "PIPVIPAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PIP VIP Availability Window Size", + "description": "Window size for the alert" + } + }, + "PIPVIPAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PIP VIP Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PIPVIPAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PIP VIP Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "PIPVIPAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PIP VIP Availability Alert State", + "description": "Alert state for the alert" + } + }, + "PIPVIPAvailabilityThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "PIP VIP Availability Threshold", + "description": "Threshold for the alert" + } + }, + "PIPBytesInDDoSAlertSeverity": { + "type": "String", + "defaultValue": "4", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Alert Severity", + "description": "Severity of the alert for PIP Bytes In DDoS" + } + }, + "PIPBytesInDDoSWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Window Size", + "description": "Window size for the alert" + } + }, + "PIPBytesInDDoSEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "PIPBytesInDDoSPolicyEffect": { + "type": "string", + "defaultValue": "disabled", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "PIPBytesInDDoSAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "PIP Bytes In DDoS Alert State", + "description": "Alert state for the alert" + } + }, + "PIPBytesInDDoSThreshold": { + "type": "string", + "defaultValue": "8000000", + "metadata": { + "displayName": "PIP Bytes In DDoS Threshold", + "description": "Threshold for the alert" + } + }, + "RVBackupHealthMonitorPolicyEffect": { + "type": "string", + "defaultValue": "modify", + "allowedValues": [ + "modify", + "audit", + "disabled" + ], + "metadata": { + "displayName": "Recovery Vault Backup Health Monitor Policy Effect", + "description": "Policy effect for the alert, modify will modify the alert if it exists, or audit if it does not exist" + } + }, + "VNETDDOSAttackAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VNET DDoS Attack Alert Severity", + "description": "Severity of the alert for VNET DDoS Attack" + } + }, + "VNETDDOSAttackWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VNET DDoS Attack Window Size", + "description": "Window size for the alert" + } + }, + "VNETDDOSAttackEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VNET DDoS Attack Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VNETDDOSAttackPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VNET DDoS Attack Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VNETDDOSAttackAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VNET DDoS Attack Alert State", + "description": "Alert state for the alert" + } + }, + "VNETDDOSAttackThreshold": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VNET DDoS Attack Threshold", + "description": "Threshold for the alert" + } + }, + "activityNSGDeleteAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Activity NSG Delete Alert State", + "description": "Alert state for the alert" + } + }, + "activityUDRUpdateAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "Activity UDR Update Alert State", + "description": "Alert state for the alert" + } + }, + "VMHeartBeatRGAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM Heart Beat RG Alert Severity", + "description": "Severity of the alert for VM Heart Beat RG" + } + }, + "VMHeartBeatRGWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM Heart Beat RG Window Size", + "description": "Window size for the alert" + } + }, + "VMHeartBeatRGEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM Heart Beat RG Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMHeartBeatRGAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Heart Beat RG Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMHeartBeatRGAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Heart Beat RG Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMHeartBeatRGAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Heart Beat RG Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMHeartBeatRGPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM Heart Beat RG Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMHeartBeatRGAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Heart Beat RG Alert State", + "description": "Alert state for the alert" + } + }, + "VMHeartBeatRGThreshold": { + "type": "string", + "defaultValue": "10", + "metadata": { + "displayName": "VM Heart Beat RG Threshold", + "description": "Threshold for the alert" + } + }, + "VMHeartBeatRGOperator": { + "type": "string", + "defaultValue": "GreaterThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM Heart Beat RG Operator", + "description": "Operator for the alert" + } + }, + "VMHeartBeatRGTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM Heart Beat RG Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMNetworkInAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM Network In Alert Severity", + "description": "Severity of the alert for VM Network In" + } + }, + "VMNetworkInWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM Network In Window Size", + "description": "Window size for the alert" + } + }, + "VMNetworkInEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM Network In Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMNetworkInAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Network In Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMNetworkInAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Network In Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMNetworkInAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Network In Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMNetworkInPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM Network In Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMNetworkInAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Network In Alert State", + "description": "Alert state for the alert" + } + }, + "VMNetworkInThreshold": { + "type": "string", + "defaultValue": "10000000", + "metadata": { + "displayName": "VM Network In Threshold", + "description": "Threshold for the alert" + } + }, + "VMNetworkInOperator": { + "type": "string", + "defaultValue": "GreaterThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM Network In Operator", + "description": "Operator for the alert" + } + }, + "VMNetworkInTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM Network In Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMNetworkInEvaluationPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Network In Evaluation Periods", + "description": "Evaluation Periods for the alert" + } + }, + "VMNetworkInFailingPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Network In Failing Periods", + "description": "Failing Periods for the alert" + } + }, + "VMNetworkInComputersToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM Network In Computers To Include", + "description": "Computers To Include for the alert" + } + }, + "VMNetworkInNetworkInterfaceToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM Network In Network Interface To Include", + "description": "Network Interface To Include for the alert" + } + }, + "VMNetworkOutAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM Network Out Alert Severity", + "description": "Severity of the alert for VM Network Out" + } + }, + "VMNetworkOutWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM Network Out Window Size", + "description": "Window size for the alert" + } + }, + "VMNetworkOutEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM Network Out Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMNetworkOutAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Network Out Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMNetworkOutAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Network Out Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMNetworkOutAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Network Out Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMNetworkOutPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM Network Out Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMNetworkOutAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Network Out Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } + }, + "VMNetworkOutThreshold": { + "type": "string", + "defaultValue": "10000000", + "metadata": { + "displayName": "VM Network Out Threshold", + "description": "Threshold for the alert" + } + }, + "VMNetworkOutOperator": { + "type": "string", + "defaultValue": "GreaterThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM Network Out Operator", + "description": "Operator for the alert" + } + }, + "VMNetworkOutTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM Network Out Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMNetworkOutEvaluationPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Network Out Evaluation Periods", + "description": "Evaluation Periods for the alert" + } + }, + "VMNetworkOutFailingPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Network Out Failing Periods", + "description": "Failing Periods for the alert" + } + }, + "VMNetworkOutComputersToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM Network Out Computers To Include", + "description": "Computers To Include for the alert" + } + }, + "VMNetworkOutNetworkInterfaceToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM Network Out Network Interface To Include", + "description": "Network Interface To Include for the alert" + } + }, + "VMOSDiskReadLatencyAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Alert Severity", + "description": "Severity of the alert for VM OS Disk Read Latency" + } + }, + "VMOSDiskReadLatencyWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Window Size", + "description": "Window size for the alert" + } + }, + "VMOSDiskReadLatencyEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMOSDiskReadLatencyAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Read Latency Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMOSDiskReadLatencyAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Read Latency Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMOSDiskReadLatencyAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM OS Disk Read Latency Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMOSDiskReadLatencyPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMOSDiskReadLatencyAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Read Latency Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } + }, + "VMOSDiskReadLatencyThreshold": { + "type": "string", + "defaultValue": "30", + "metadata": { + "displayName": "VM OS Disk Read Latency Threshold", + "description": "Threshold for the alert" + } + }, + "VMOSDiskReadLatencyOperator": { + "type": "string", + "defaultValue": "LessThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Operator", + "description": "Operator for the alert" + } + }, + "VMOSDiskReadLatencyTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMOSDiskReadLatencyEvaluationPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Read Latency Evaluation Periods", + "description": "Evaluation Periods for the alert" + } + }, + "VMOSDiskReadLatencyFailingPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Read Latency Failing Periods", + "description": "Failing Periods for the alert" + } + }, + "VMOSDiskReadLatencyComputersToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Computers To Include", + "description": "Computers To Include for the alert" + } + }, + "VMOSDiskReadLatencyDisksToInclude": { + "type": "array", + "defaultValue": [ + "C:", + "/" + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Disks To Include", + "description": "Disks To Include for the alert" + } + }, + "VMOSDiskWriteLatencyAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Alert Severity", + "description": "Severity of the alert for VM OS Disk Write Latency" + } + }, + "VMOSDiskWriteLatencyWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Window Size", + "description": "Window size for the alert" + } + }, + "VMOSDiskWriteLatencyEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMOSDiskWriteLatencyAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Write Latency Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMOSDiskWriteLatencyAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Write Latency Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMOSDiskWriteLatencyAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM OS Disk Write Latency Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMOSDiskWriteLatencyPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMOSDiskWriteLatencyAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Write Latency Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } + }, + "VMOSDiskWriteLatencyThreshold": { + "type": "string", + "defaultValue": "50", + "metadata": { + "displayName": "VM OS Disk Write Latency Threshold", + "description": "Threshold for the alert" + } + }, + "VMOSDiskWriteLatencyOperator": { + "type": "string", + "defaultValue": "LessThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Operator", + "description": "Operator for the alert" + } + }, + "VMOSDiskWriteLatencyTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMOSDiskWriteLatencyEvaluationPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Write Latency Evaluation Periods", + "description": "Evaluation Periods for the alert" + } + }, + "VMOSDiskWriteLatencyFailingPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Write Latency Failing Periods", + "description": "Failing Periods for the alert" + } + }, + "VMOSDiskWriteLatencyComputersToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Computers To Include", + "description": "Computers To Include for the alert" + } + }, + "VMOSDiskWriteLatencyDisksToInclude": { + "type": "array", + "defaultValue": [ + "C:", + "/" + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Disks To Include", + "description": "Disks To Include for the alert" + } + }, + "VMOSDiskSpaceAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM OS Disk Space Alert Severity", + "description": "Severity of the alert for VM OS Disk Space" + } + }, + "VMOSDiskSpaceWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM OS Disk Space Window Size", + "description": "Window size for the alert" + } + }, + "VMOSDiskSpaceEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM OS Disk Space Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMOSDiskSpaceAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Space Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMOSDiskSpaceAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Space Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMOSDiskSpaceAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM OS Disk Space Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMOSDiskSpacePolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM OS Disk Space Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMOSDiskSpaceAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Space Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } + }, + "VMOSDiskSpaceThreshold": { + "type": "string", + "defaultValue": "10", + "metadata": { + "displayName": "VM OS Disk Space Threshold", + "description": "Threshold for the alert" + } + }, + "VMOSDiskSpaceOperator": { + "type": "string", + "defaultValue": "LessThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM OS Disk Space Operator", + "description": "Operator for the alert" + } + }, + "VMOSDiskSpaceTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM OS Disk Space Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMOSDiskSpaceEvaluationPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Space Evaluation Periods", + "description": "Evaluation Periods for the alert" + } + }, + "VMOSDiskSpaceFailingPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Space Failing Periods", + "description": "Failing Periods for the alert" + } + }, + "VMOSDiskSpaceComputersToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM OS Disk Space Computers To Include", + "description": "Computers To Include for the alert" + } + }, + "VMOSDiskSpaceDisksToInclude": { + "type": "array", + "defaultValue": [ + "C:", + "/" + ], + "metadata": { + "displayName": "VM OS Disk Space Disks To Include", + "description": "Disks To Include for the alert" + } + }, + "VMPercentCPUAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM Percent CPU Alert Severity", + "description": "Severity of the alert for VM Percent CPU" + } + }, + "VMPercentCPUWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM Percent CPU Window Size", + "description": "Window size for the alert" + } + }, + "VMPercentCPUEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM Percent CPU Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMPercentCPUAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent CPU Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMPercentCPUAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent CPU Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMPercentCPUAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Percent CPU Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMPercentCPUPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM Percent CPU Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMPercentCPUAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent CPU Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } + }, + "VMPercentCPUThreshold": { + "type": "string", + "defaultValue": "85", + "metadata": { + "displayName": "VM Percent CPU Threshold", + "description": "Threshold for the alert" + } + }, + "VMPercentCPUOperator": { + "type": "string", + "defaultValue": "GreaterThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM Percent CPU Operator", + "description": "Operator for the alert" + } + }, + "VMPercentCPUTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM Percent CPU Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMPercentMemoryAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM Percent Memory Alert Severity", + "description": "Severity of the alert for VM Percent Memory" + } + }, + "VMPercentMemoryWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM Percent Memory Window Size", + "description": "Window size for the alert" + } + }, + "VMPercentMemoryEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM Percent Memory Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMPercentMemoryAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent Memory Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMPercentMemoryAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent Memory Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMPercentMemoryAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Percent Memory Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMPercentMemoryPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM Percent Memory Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMPercentMemoryAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent Memory Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } + }, + "VMPercentMemoryThreshold": { + "type": "string", + "defaultValue": "10", + "metadata": { + "displayName": "VM Percent Memory Threshold", + "description": "Threshold for the alert" + } + }, + "VMPercentMemoryOperator": { + "type": "string", + "defaultValue": "LessThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM Percent Memory Operator", + "description": "Operator for the alert" + } + }, + "VMPercentMemoryTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM Percent Memory Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMDataDiskSpaceAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM Data Disk Space Alert Severity", + "description": "Severity of the alert for VM Data Disk Space" + } + }, + "VMDataDiskSpaceWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM Data Disk Space Window Size", + "description": "Window size for the alert" + } + }, + "VMDataDiskSpaceEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM Data Disk Space Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMDataDiskSpaceAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Space Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMDataDiskSpaceAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Space Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMDataDiskSpaceAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Data Disk Space Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMDataDiskSpacePolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM Data Disk Space Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMDataDiskSpaceAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Space Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } + }, + "VMDataDiskSpaceThreshold": { + "type": "string", + "defaultValue": "10", + "metadata": { + "displayName": "VM Data Disk Space Threshold", + "description": "Threshold for the alert" + } + }, + "VMDataDiskSpaceOperator": { + "type": "string", + "defaultValue": "LessThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM Data Disk Space Operator", + "description": "Operator for the alert" + } + }, + "VMDataDiskSpaceTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM Data Disk Space Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMDataDiskSpaceEvaluationPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Space Evaluation Periods", + "description": "Evaluation Periods for the alert" + } + }, + "VMDataDiskSpaceFailingPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Space Failing Periods", + "description": "Failing Periods for the alert" + } + }, + "VMDataDiskSpaceDisksToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM Data Disk Space Disks To Include", + "description": "Disks To Include for the alert" + } + }, + "VMDataDiskReadLatencyAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Alert Severity", + "description": "Severity of the alert for VM Data Disk Read Latency" + } + }, + "VMDataDiskReadLatencyWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Window Size", + "description": "Window size for the alert" + } + }, + "VMDataDiskReadLatencyEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMDataDiskReadLatencyAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Read Latency Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMDataDiskReadLatencyAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Read Latency Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMDataDiskReadLatencyAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Data Disk Read Latency Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMDataDiskReadLatencyPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMDataDiskReadLatencyAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Read Latency Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } + }, + "VMDataDiskReadLatencyThreshold": { + "type": "string", + "defaultValue": "30", + "metadata": { + "displayName": "VM Data Disk Read Latency Threshold", + "description": "Threshold for the alert" + } + }, + "VMDataDiskReadLatencyOperator": { + "type": "string", + "defaultValue": "LessThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Operator", + "description": "Operator for the alert" + } + }, + "VMDataDiskReadLatencyTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMDataDiskReadLatencyEvaluationPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Read Latency Evaluation Periods", + "description": "Evaluation Periods for the alert" + } + }, + "VMDataDiskReadLatencyFailingPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Read Latency Failing Periods", + "description": "Failing Periods for the alert" + } + }, + "VMDataDiskReadLatencyComputersToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Computers To Include", + "description": "Computers To Include for the alert" + } + }, + "VMDataDiskReadLatencyDisksToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Disks To Include", + "description": "Disks To Include for the alert" + } + }, + "VMDataDiskWriteLatencyAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Alert Severity", + "description": "Severity of the alert for VM Data Disk Write Latency" + } + }, + "VMDataDiskWriteLatencyWindowSize": { + "type": "string", + "defaultValue": "PT15M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Window Size", + "description": "Window size for the alert" + } + }, + "VMDataDiskWriteLatencyEvaluationFrequency": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "VMDataDiskWriteLatencyAutoMitigate": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Write Latency Auto Mitigate", + "description": "Auto Mitigate for the alert" + } + }, + "VMDataDiskWriteLatencyAutoResolve": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Write Latency Auto Resolve", + "description": "Auto Resolve for the alert" + } + }, + "VMDataDiskWriteLatencyAutoResolveTime": { + "type": "string", + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Data Disk Write Latency Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } + }, + "VMDataDiskWriteLatencyPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } + }, + "VMDataDiskWriteLatencyAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Write Latency Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } + }, + "VMDataDiskWriteLatencyThreshold": { + "type": "string", + "defaultValue": "30", + "metadata": { + "displayName": "VM Data Disk Write Latency Threshold", + "description": "Threshold for the alert" + } + }, + "VMDataDiskWriteLatencyOperator": { + "type": "string", + "defaultValue": "LessThan", + "allowedValues": [ + "Equals", + "GreaterThan", + "GreaterThanOrEqual", + "LessThan", + "LessThanOrEqual" + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Operator", + "description": "Operator for the alert" + } + }, + "VMDataDiskWriteLatencyTimeAggregation": { + "type": "string", + "defaultValue": "Average", + "allowedValues": [ + "Average", + "Count", + "Maximum", + "Minimum", + "Total" + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Time Aggregation", + "description": "Time Aggregation for the alert" + } + }, + "VMDataDiskWriteLatencyEvaluationPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Write Latency Evaluation Periods", + "description": "Evaluation Periods for the alert" + } + }, + "VMDataDiskWriteLatencyFailingPeriods": { + "type": "string", + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Write Latency Failing Periods", + "description": "Failing Periods for the alert" + } + }, + "VMDataDiskWriteLatencyComputersToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Computers To Include", + "description": "Computers To Include for the alert" + } + }, + "VMDataDiskWriteLatencyDisksToInclude": { + "type": "array", + "defaultValue": [ + "*" + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Disks To Include", + "description": "Disks To Include for the alert" + } + }, + "AGWApplicationGatewayTotalTimeAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "AGW Total Time Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWApplicationGatewayTotalTimeWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Total Time Window Size", + "description": "Window size for the alert" + } + }, + "AGWApplicationGatewayTotalTimeEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "AGW Total Time Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWApplicationGatewayTotalTimePolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "AGW Total Time Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWApplicationGatewayTotalTimeAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Total Time Alert State", + "description": "Alert state for the alert" + } + }, + "AGWBackendLastByteResponseTimeAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWBackendLastByteResponseTimeWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Window Size", + "description": "Window size for the alert" + } + }, + "AGWBackendLastByteResponseTimeEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWBackendLastByteResponseTimePolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWBackendLastByteResponseTimeAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Alert State", + "description": "Alert state for the alert" + } + }, + "AGWCapacityUnitsAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "AGW Capacity Units Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWCapacityUnitsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Capacity Units Window Size", + "description": "Window size for the alert" + } + }, + "AGWCapacityUnitsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "AGW Capacity Units Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWCapacityUnitsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "AGW Capacity Units Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWCapacityUnitsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Capacity Units Alert State", + "description": "Alert state for the alert" + } + }, + "AGWComputeUnitsAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "AGW Compute Units Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWComputeUnitsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Compute Units Window Size", + "description": "Window size for the alert" + } + }, + "AGWComputeUnitsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "AGW Compute Units Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWComputeUnitsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "AGW Compute Units Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWComputeUnitsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Compute Units Alert State", + "description": "Alert state for the alert" + } + }, + "AGWCPUUtilAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "AGW CPU Util Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWCPUUtilWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW CPU Util Window Size", + "description": "Window size for the alert" + } + }, + "AGWCPUUtilEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "AGW CPU Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWCPUUtilPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "AGW CPU Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWCPUUtilAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW CPU Util Alert State", + "description": "Alert state for the alert" + } + }, + "AGWFailedRequestsAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "AGW Failed Requests Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWFailedRequestsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Failed Requests Window Size", + "description": "Window size for the alert" + } + }, + "AGWFailedRequestsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "AGW Failed Requests Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWFailedRequestsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "AGW Failed Requests Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWFailedRequestsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Failed Requests Alert State", + "description": "Alert state for the alert" + } + }, + "AGWResponseStatusAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "AGW Response Status Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWResponseStatusWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Response Status Window Size", + "description": "Window size for the alert" + } + }, + "AGWResponseStatusEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "AGW Response Status Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWResponseStatusPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "AGW Response Status Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWResponseStatusAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Response Status Alert State", + "description": "Alert state for the alert" + } + }, + "AGWUnhealthyHostCountAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "AGW Unhealthy Host Count Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWUnhealthyHostCountWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Unhealthy Host Count Window Size", + "description": "Window size for the alert" + } + }, + "AGWUnhealthyHostCountEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "AGW Unhealthy Host Count Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWUnhealthyHostCountPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "AGW Unhealthy Host Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWUnhealthyHostCountAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Unhealthy Host Count Alert State", + "description": "Alert state for the alert" + } + }, + "LBDatapathAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Data path Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "LBDatapathAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Data path Availability Window Size", + "description": "Window size for the alert" + } + }, + "LBDatapathAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Data path Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBDatapathAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Data path Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBDatapathAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Data path Availability Alert State", + "description": "Alert state for the alert" + } + }, + "LBGlobalBackendAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Global Backend Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "LBGlobalBackendAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Global Backend Availability Window Size", + "description": "Window size for the alert" + } + }, + "LBGlobalBackendAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Global Backend Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBGlobalBackendAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Global Backend Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBGlobalBackendAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Global Backend Availability Alert State", + "description": "Alert state for the alert" + } + }, + "LBHealthProbeStatusAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Health Probe Status Alert Severity", + "description": "Severity of the alert" + } + }, + "LBHealthProbeStatusWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Health Probe Status Window Size", + "description": "Window size for the alert" + } + }, + "LBHealthProbeStatusEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Health Probe Status Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBHealthProbeStatusPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Health Probe Status Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBHealthProbeStatusAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Health Probe Status Alert State", + "description": "Alert state for the alert" + } + }, + "LBUsedSNATPortsAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Alert Severity", + "description": "Severity of the alert" + } + }, + "LBUsedSNATPortsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Window Size", + "description": "Window size for the alert" + } + }, + "LBUsedSNATPortsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBUsedSNATPortsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBUsedSNATPortsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Used SNAT Ports Alert State", + "description": "Alert state for the alert" + } + } + }, + "policyDefinitions": [ + { + "policyDefinitionReferenceId": "ALZ_KVRequest", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Requests_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('KVRequestAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('KVRequestWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('KVRequestEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('KVRequestPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('KVRequestAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_KvAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Availability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('KvAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('KvAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('KvAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('KvAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('KvAvailabilityAlertState')]" + }, + "threshold": { + "value": "[[[parameters('KVAvailabilityThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_KvLatencyAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Latency_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('KvLatencyAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('KvLatencyAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('KvLatencyAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('KvLatencyAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('KvLatencyAvailabilityAlertState')]" + }, + "threshold": { + "value": "[[[parameters('KvLatencyAvailabilityThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_KVCapacity", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Capacity_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('KVCapacityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('KVCapacityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('KVCapacityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('KVCapacityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('KVCapacityAlertState')]" + }, + "threshold": { + "value": "[[[parameters('KVCapacityThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_activityKVDelete", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_KeyVault_Delete')]", + "parameters": { + "enabled": { + "value": "[[[parameters('activityKVDeleteAlertState')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_StorageAccountAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_StorageAccount_Availability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('StorageAccountAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('StorageAccountAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('StorageAccountAvailabilityFrequency')]" + }, + "effect": { + "value": "[[[parameters('StorageAccountAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('StorageAccountAvailabilityAlertState')]" + }, + "threshold": { + "value": "[[[parameters('StorageAccountAvailabilityThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PIPBytesInDDoS", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_BytesInDDoSAttack_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PIPBytesInDDoSAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PIPBytesInDDoSWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PIPBytesInDDoSEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PIPBytesInDDoSPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PIPBytesInDDoSAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PIPBytesInDDoSThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PIPDDoSAttack", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_DDoSAttack_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PIPDDoSAttackAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PIPDDoSAttackWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PIPDDoSAttackEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PIPDDoSAttackPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PIPDDoSAttackAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PIPDDoSAttackThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PIPPacketsInDDoS", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_PacketsInDDoSAttack_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PIPPacketsInDDoSAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PIPPacketsInDDoSWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PIPPacketsInDDoSEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PIPPacketsInDDoSPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PIPPacketsInDDoSAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PIPPacketsInDDoSThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_PIPVIPAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_PublicIp_VIPAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('PIPVIPAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('PIPVIPAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('PIPVIPAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('PIPVIPAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('PIPVIPAvailabilityAlertState')]" + }, + "threshold": { + "value": "[[[parameters('PIPVIPAvailabilityThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_activityNSGDelete", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_NSG_Delete')]", + "parameters": { + "enabled": { + "value": "[[[parameters('activityNSGDeleteAlertState')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_activityUDRUpdate", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_RouteTable_Update')]", + "parameters": { + "enabled": { + "value": "[[[parameters('activityUDRUpdateAlertState')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_RVBackupHealthMonitor", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_RecoveryVault_BackupHealthMonitor_Alert')]", + "parameters": { + "effect": { + "value": "[[[parameters('RVBackupHealthMonitorPolicyEffect')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VNETDDOSAttack", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VNET_DDoSAttack_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VNETDDOSAttackAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VNETDDOSAttackWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VNETDDOSAttackEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('VNETDDOSAttackPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VNETDDOSAttackAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VNETDDOSAttackThreshold')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMHeartBeatRG", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_HeartBeat_Alert')]", + "parameters": { + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + }, + "severity": { + "value": "[[[parameters('VMHeartBeatRGAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMHeartBeatRGWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMHeartBeatRGEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMHeartBeatRGAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMHeartBeatRGAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMHeartBeatRGAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMHeartBeatRGPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMHeartBeatRGAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMHeartBeatRGThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMHeartBeatRGOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMHeartBeatRGTimeAggregation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMNetworkIn", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_NetworkIn_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMNetworkInAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMNetworkInWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMNetworkInEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMNetworkInAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMNetworkInAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMNetworkInAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMNetworkInPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMNetworkInAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMNetworkInThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMNetworkInOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMNetworkInTimeAggregation')]" + }, + "failingPeriods": { + "value": "[[[parameters('VMNetworkInFailingPeriods')]" + }, + "evaluationPeriods": { + "value": "[[[parameters('VMNetworkInEvaluationPeriods')]" + }, + "computersToInclude": { + "value": "[[[parameters('VMNetworkInComputersToInclude')]" + }, + "networkInterfacesToInclude": { + "value": "[[[parameters('VMNetworkInNetworkInterfaceToInclude')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMNetworkOut", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_NetworkOut_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMNetworkOutAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMNetworkOutWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMNetworkOutEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMNetworkOutAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMNetworkOutAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMNetworkOutAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMNetworkOutPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMNetworkOutAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMNetworkOutThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMNetworkOutOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMNetworkOutTimeAggregation')]" + }, + "failingPeriods": { + "value": "[[[parameters('VMNetworkOutFailingPeriods')]" + }, + "evaluationPeriods": { + "value": "[[[parameters('VMNetworkOutEvaluationPeriods')]" + }, + "computersToInclude": { + "value": "[[[parameters('VMNetworkOutComputersToInclude')]" + }, + "networkInterfacesToInclude": { + "value": "[[[parameters('VMNetworkOutNetworkInterfaceToInclude')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMOSDiskReadLatency", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_OSDiskreadLatency_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMOSDiskReadLatencyAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMOSDiskReadLatencyWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMOSDiskReadLatencyEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMOSDiskReadLatencyAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMOSDiskReadLatencyAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMOSDiskReadLatencyAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMOSDiskReadLatencyPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMOSDiskReadLatencyAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMOSDiskReadLatencyThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMOSDiskReadLatencyOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMOSDiskReadLatencyTimeAggregation')]" + }, + "failingPeriods": { + "value": "[[[parameters('VMOSDiskReadLatencyFailingPeriods')]" + }, + "evaluationPeriods": { + "value": "[[[parameters('VMOSDiskReadLatencyEvaluationPeriods')]" + }, + "computersToInclude": { + "value": "[[[parameters('VMOSDiskReadLatencyComputersToInclude')]" + }, + "disksToInclude": { + "value": "[[[parameters('VMOSDiskReadLatencyDisksToInclude')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMOSDiskWriteLatency", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_OSDiskwriteLatency_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMOSDiskWriteLatencyAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMOSDiskWriteLatencyWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMOSDiskWriteLatencyEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMOSDiskWriteLatencyAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMOSDiskWriteLatencyAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMOSDiskWriteLatencyAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMOSDiskWriteLatencyPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMOSDiskWriteLatencyAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMOSDiskWriteLatencyThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMOSDiskWriteLatencyOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMOSDiskWriteLatencyTimeAggregation')]" + }, + "failingPeriods": { + "value": "[[[parameters('VMOSDiskWriteLatencyFailingPeriods')]" + }, + "evaluationPeriods": { + "value": "[[[parameters('VMOSDiskWriteLatencyEvaluationPeriods')]" + }, + "computersToInclude": { + "value": "[[[parameters('VMOSDiskWriteLatencyComputersToInclude')]" + }, + "disksToInclude": { + "value": "[[[parameters('VMOSDiskWriteLatencyDisksToInclude')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMOSDiskSpace", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_OSDiskSpace_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMOSDiskSpaceAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMOSDiskSpaceWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMOSDiskSpaceEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMOSDiskSpaceAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMOSDiskSpaceAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMOSDiskSpaceAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMOSDiskSpacePolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMOSDiskSpaceAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMOSDiskSpaceThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMOSDiskSpaceOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMOSDiskSpaceTimeAggregation')]" + }, + "failingPeriods": { + "value": "[[[parameters('VMOSDiskSpaceFailingPeriods')]" + }, + "evaluationPeriods": { + "value": "[[[parameters('VMOSDiskSpaceEvaluationPeriods')]" + }, + "computersToInclude": { + "value": "[[[parameters('VMOSDiskSpaceComputersToInclude')]" + }, + "disksToInclude": { + "value": "[[[parameters('VMOSDiskSpaceDisksToInclude')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMPercentCPU", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_CPU_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMPercentCPUAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMPercentCPUWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMPercentCPUEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMPercentCPUAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMPercentCPUAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMPercentCPUAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMPercentCPUPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMPercentCPUAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMPercentCPUThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMPercentCPUOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMPercentCPUTimeAggregation')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMPercentMemory", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_Memory_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMPercentMemoryAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMPercentMemoryWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMPercentMemoryEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMPercentMemoryAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMPercentMemoryAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMPercentMemoryAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMPercentMemoryPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMPercentMemoryAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMPercentMemoryThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMPercentMemoryOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMPercentMemoryTimeAggregation')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMDataDiskSpace", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_dataDiskSpace_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMDataDiskSpaceAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMDataDiskSpaceWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMDataDiskSpaceEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMDataDiskSpaceAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMDataDiskSpaceAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMDataDiskSpaceAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMDataDiskSpacePolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMDataDiskSpaceAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMDataDiskSpaceThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMDataDiskSpaceOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMDataDiskSpaceTimeAggregation')]" + }, + "failingPeriods": { + "value": "[[[parameters('VMDataDiskSpaceFailingPeriods')]" + }, + "evaluationPeriods": { + "value": "[[[parameters('VMDataDiskSpaceEvaluationPeriods')]" + }, + "disksToInclude": { + "value": "[[[parameters('VMDataDiskSpaceDisksToInclude')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMDataDiskReadLatency", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_dataDiskReadLatency_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMDataDiskReadLatencyAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMDataDiskReadLatencyWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMDataDiskReadLatencyEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMDataDiskReadLatencyAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMDataDiskReadLatencyAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMDataDiskReadLatencyAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMDataDiskReadLatencyPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMDataDiskReadLatencyAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMDataDiskReadLatencyThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMDataDiskReadLatencyOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMDataDiskReadLatencyTimeAggregation')]" + }, + "failingPeriods": { + "value": "[[[parameters('VMDataDiskReadLatencyFailingPeriods')]" + }, + "evaluationPeriods": { + "value": "[[[parameters('VMDataDiskReadLatencyEvaluationPeriods')]" + }, + "computersToInclude": { + "value": "[[[parameters('VMDataDiskReadLatencyComputersToInclude')]" + }, + "disksToInclude": { + "value": "[[[parameters('VMDataDiskReadLatencyDisksToInclude')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_VMDataDiskWriteLatency", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_VM_dataDiskWriteLatency_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('VMDataDiskWriteLatencyAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('VMDataDiskWriteLatencyWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('VMDataDiskWriteLatencyEvaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[[parameters('VMDataDiskWriteLatencyAutoMitigate')]" + }, + "autoResolve": { + "value": "[[[parameters('VMDataDiskWriteLatencyAutoResolve')]" + }, + "autoResolveTime": { + "value": "[[[parameters('VMDataDiskWriteLatencyAutoResolveTime')]" + }, + "effect": { + "value": "[[[parameters('VMDataDiskWriteLatencyPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('VMDataDiskWriteLatencyAlertState')]" + }, + "threshold": { + "value": "[[[parameters('VMDataDiskWriteLatencyThreshold')]" + }, + "operator": { + "value": "[[[parameters('VMDataDiskWriteLatencyOperator')]" + }, + "timeAggregation": { + "value": "[[[parameters('VMDataDiskWriteLatencyTimeAggregation')]" + }, + "failingPeriods": { + "value": "[[[parameters('VMDataDiskWriteLatencyFailingPeriods')]" + }, + "evaluationPeriods": { + "value": "[[[parameters('VMDataDiskWriteLatencyEvaluationPeriods')]" + }, + "computersToInclude": { + "value": "[[[parameters('VMDataDiskWriteLatencyComputersToInclude')]" + }, + "disksToInclude": { + "value": "[[[parameters('VMDataDiskWriteLatencyDisksToInclude')]" + }, + "alertResourceGroupName": { + "value": "[[[parameters('ALZMonitorResourceGroupName')]" + }, + "alertResourceGroupTags": { + "value": "[[[parameters('ALZMonitorResourceGroupTags')]" + }, + "alertResourceGroupLocation": { + "value": "[[[parameters('ALZMonitorResourceGroupLocation')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWTotalTime", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_ApplicationGatewayTotalTime_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('AGWApplicationGatewayTotalTimeAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('AGWApplicationGatewayTotalTimeWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('AGWApplicationGatewayTotalTimeEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('AGWApplicationGatewayTotalTimePolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('AGWApplicationGatewayTotalTimeAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWBackendLastByteResponseTime", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_BackendLastByteResponseTime_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('AGWBackendLastByteResponseTimeAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('AGWBackendLastByteResponseTimeWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('AGWBackendLastByteResponseTimeEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('AGWBackendLastByteResponseTimePolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('AGWBackendLastByteResponseTimeAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWCapacityUnits", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_CapacityUnits_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('AGWCapacityUnitsAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('AGWCapacityUnitsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('AGWCapacityUnitsEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('AGWCapacityUnitsPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('AGWCapacityUnitsAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWComputeUnits", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_ComputeUnits_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('AGWComputeUnitsAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('AGWComputeUnitsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('AGWComputeUnitsEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('AGWComputeUnitsPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('AGWComputeUnitsAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWCPUUtilization", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_CPUUtilization_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('AGWCPUUtilAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('AGWCPUUtilWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('AGWCPUUtilEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('AGWCPUUtilPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('AGWCPUUtilAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWFailedRequests", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_FailedRequests_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('AGWFailedRequestsAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('AGWFailedRequestsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('AGWFailedRequestsEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('AGWFailedRequestsPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('AGWFailedRequestsAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWResponseStatus", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_ResponseStatus_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('AGWResponseStatusAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('AGWResponseStatusWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('AGWResponseStatusEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('AGWResponseStatusPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('AGWResponseStatusAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWUnhealthyHostCount", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_UnhealthyHostCount_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('AGWUnhealthyHostCountAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('AGWUnhealthyHostCountWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('AGWUnhealthyHostCountEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('AGWUnhealthyHostCountPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('AGWUnhealthyHostCountAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBDataPathAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_DataPathAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('LBDataPathAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('LBDataPathAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('LBDataPathAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('LBDataPathAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('LBDataPathAvailabilityAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBGlobalBackendAvailability", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_GlobalBackendAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('LBGlobalBackendAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('LBGlobalBackendAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('LBGlobalBackendAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('LBGlobalBackendAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('LBGlobalBackendAvailabilityAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBHealthProbeStatus", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_HealthProbeStatus_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('LBHealthProbeStatusAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('LBHealthProbeStatusWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('LBHealthProbeStatusEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('LBHealthProbeStatusPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('LBHealthProbeStatusAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBUsedSNATPorts", + "policyDefinitionId": "[[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_UsedSNATPorts_Alert')]", + "parameters": { + "severity": { + "value": "[[[parameters('LBUsedSNATPortsAlertSeverity')]" + }, + "windowSize": { + "value": "[[[parameters('LBUsedSNATPortsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[[parameters('LBUsedSNATPortsEvaluationFrequency')]" + }, + "effect": { + "value": "[[[parameters('LBUsedSNATPortsPolicyEffect')]" + }, + "enabled": { + "value": "[[[parameters('LBUsedSNATPortsAlertState')]" + } + } + } + ], + "policyType": "Custom", + "policyDefinitionGroups": null + } + }, "$fxv#9": "{\r\n \"type\": \"Microsoft.Authorization/policyDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Deploy_activitylog_ServiceHealth_Incident\",\r\n \"properties\": {\r\n \"policyType\": \"Custom\",\r\n \"mode\": \"All\",\r\n \"displayName\": \"Deploy Service Health Incident Alert\",\r\n \"description\": \"Policy to Deploy Service Health Incident Alert\",\r\n \"metadata\": {\r\n \"version\": \"1.1.1\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": \"True\"\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n },\r\n \"allowedValues\": [\r\n \"true\",\r\n \"false\"\r\n ],\r\n \"defaultValue\": \"true\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"AlzMonitoring-rg\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags on the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": {\r\n \"environment\": \"test\",\r\n \"_deployed_by_amba\": true\r\n }\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the Resource group the alert is placed in\"\r\n },\r\n \"defaultValue\": \"centralus\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Action Group Email\",\r\n \"description\": \"Email address to send alerts to\"\r\n },\r\n \"defaultValue\": \"action@mail.com\"\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"String\",\r\n \"metadata\": {\r\n \"displayName\": \"Effect\",\r\n \"description\": \"Tag name to disable monitoring Subscription level alerts. Set to true if monitoring should be disabled\"\r\n },\r\n \"defaultValue\": \"MonitorDisable\"\r\n }\r\n },\r\n \"policyRule\": {\r\n \"if\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"type\",\r\n \"equals\": \"Microsoft.Resources/subscriptions\"\r\n },\r\n {\r\n \"field\": \"[[concat('tags[', parameters('MonitorDisable'), ']')]\",\r\n \"notEquals\": \"true\"\r\n }\r\n ]\r\n },\r\n \"then\": {\r\n \"effect\": \"deployIfNotExists\",\r\n \"details\": {\r\n \"roleDefinitionIds\": [\r\n \"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"\r\n ],\r\n \"type\": \"Microsoft.Insights/activityLogAlerts\",\r\n \"existenceScope\": \"resourcegroup\",\r\n \"resourceGroupName\": \"[[parameters('alertResourceGroupName')]\",\r\n \"deploymentScope\": \"subscription\",\r\n \"existenceCondition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/enabled\",\r\n \"equals\": \"[[parameters('enabled')]\"\r\n },\r\n {\r\n \"count\": {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\r\n \"where\": {\r\n \"anyOf\": [\r\n {\r\n \"allOf\": [\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\r\n \"equals\": \"category\"\r\n },\r\n {\r\n \"field\": \"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\r\n \"equals\": \"ServiceHealth\"\r\n }\r\n ]\r\n },\r\n {\r\n \"allOf\": [\r\n {\r\n \"field\": \"microsoft.insights/activityLogAlerts/condition.allOf[*].field\",\r\n \"equals\": \"properties.incidentType\"\r\n },\r\n {\r\n \"field\": \"microsoft.insights/activityLogAlerts/condition.allOf[*].equals\",\r\n \"equals\": \"Incident\"\r\n }\r\n ]\r\n }\r\n ]\r\n }\r\n },\r\n \"equals\": 2\r\n }\r\n ]\r\n },\r\n \"deployment\": {\r\n \"location\": \"[[deployment().location]\",\r\n \"properties\": {\r\n \"mode\": \"incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"type\": \"object\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"type\": \"string\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"type\": \"string\"\r\n },\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Resources/resourceGroups\",\r\n \"apiVersion\": \"2021-04-01\",\r\n \"name\": \"[[parameters('alertResourceGroupName')]\",\r\n \"location\": \"[[parameters('alertResourceGroupLocation')]\",\r\n \"tags\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n {\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n \"apiVersion\": \"2019-10-01\",\r\n \"name\": \"ServiceHealthIncident\",\r\n \"resourceGroup\": \"[[parameters('alertResourceGroupName')]\",\r\n \"dependsOn\": [\r\n \"[[concat('Microsoft.Resources/resourceGroups/', parameters('alertResourceGroupName'))]\"\r\n ],\r\n \"properties\": {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"type\": \"string\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"type\": \"string\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"type\": \"microsoft.insights/activityLogAlerts\",\r\n \"apiVersion\": \"2020-10-01\",\r\n \"name\": \"ServiceHealthIncident\",\r\n \"location\": \"global\",\r\n \"dependsOn\": [\r\n \"[[concat(subscription().Id, '/resourceGroups/', parameters('alertResourceGroupName'), '/providers/Microsoft.Insights/actionGroups/AlzActionGrp')]\"\r\n ],\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"actions\": {\r\n \"actionGroups\": [\r\n {\r\n \"actionGroupId\": \"[[concat(subscription().Id, '/resourceGroups/', parameters('alertResourceGroupName'), '/providers/Microsoft.Insights/actionGroups/AlzActionGrp')]\"\r\n }\r\n ]\r\n },\r\n \"description\": \"ServiceHealthIncidentAlert\",\r\n \"enabled\": \"[[parameters('enabled')]\",\r\n \"scopes\": [\r\n \"[[subscription().id]\"\r\n ],\r\n \"condition\": {\r\n \"allOf\": [\r\n {\r\n \"field\": \"category\",\r\n \"equals\": \"ServiceHealth\"\r\n },\r\n {\r\n \"field\": \"properties.incidentType\",\r\n \"equals\": \"Incident\"\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n }\r\n }\r\n }\r\n },\r\n {\r\n \"type\": \"Microsoft.Insights/actionGroups\",\r\n \"apiVersion\": \"2022-04-01\",\r\n \"name\": \"AlzActionGrp\",\r\n \"location\": \"global\",\r\n \"tags\": {\r\n \"_deployed_by_amba\": true\r\n },\r\n \"properties\": {\r\n \"groupShortName\": \"AlzActionGrp\",\r\n \"enabled\": true,\r\n \"emailReceivers\": [\r\n {\r\n \"name\": \"AlzMail\",\r\n \"emailAddress\": \"[[parameters('ALZMonitorActionGroupEmail')]\",\r\n \"useCommonAlertSchema\": true\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n }\r\n }\r\n ]\r\n },\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('enabled')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('alertResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('alertResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('alertResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n }\r\n}\r\n", + "$fxv#90": "{\r\n \"type\": \"Microsoft.Authorization/policySetDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Alerting-Management\",\r\n \"properties\": {\r\n \"displayName\": \"Deploy Azure Monitor Baseline Alerts for Management\",\r\n \"description\": \"Initiative to deploy AMBA alerts relevant to the ALZ Management management group\",\r\n \"metadata\": {\r\n \"version\": \"1.0.2\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": true\r\n },\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"ALZ-Monitoring-RG\",\r\n \"metadata\": {\r\n \"displayName\": \"ALZ Monitoring Resource Group Name\",\r\n \"description\": \"Name of the resource group to deploy the ALZ monitoring resources to\"\r\n }\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"defaultValue\": {\r\n \"_deployed_by_alz_monitor\": true\r\n },\r\n \"metadata\": {\r\n \"displayName\": \"ALZ Monitoring Resource Group Tags\",\r\n \"description\": \"Tags to apply to the resource group\"\r\n }\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"centralus\",\r\n \"metadata\": {\r\n \"displayName\": \"ALZ Monitoring Resource Group Location\",\r\n \"description\": \"Location of the resource group\"\r\n }\r\n },\r\n \"AATotalJobAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"2\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"AA Total Job Alert Severity\",\r\n \"description\": \"Severity of the alert\"\r\n }\r\n },\r\n \"AATotalJobAlertWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"AA Total Job Alert Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n }\r\n },\r\n \"AATotalJobAlertEvaluationFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT1M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"AA Total Job Alert Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n }\r\n },\r\n \"AATotalJobAlertPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"AA Total Job Alert Policy Effect\",\r\n \"description\": \"Policy effect for the alert\"\r\n }\r\n },\r\n \"AATotalJobAlertAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"AA Total Job Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n }\r\n },\r\n \"AATotalJobAlertThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"20\",\r\n \"metadata\": {\r\n \"displayName\": \"AA Total Job Alert Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n }\r\n },\r\n \"RVBackupHealthPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"modify\",\r\n \"allowedValues\": [\r\n \"modify\",\r\n \"audit\",\r\n \"disabled\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"RV Backup Health Monitor Policy Effect\",\r\n \"description\": \"Policy effect for the alert, modify will create the alert if it does not exist and enable it on your Recovery Vaults, audit will only audit if alerting is enabled on Recovery Vaults, disabled will not create the alert on Recovery Vaults\"\r\n }\r\n },\r\n \"StorageAccountAvailabilityAlertSeverity\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"1\",\r\n \"allowedValues\": [\r\n \"0\",\r\n \"1\",\r\n \"2\",\r\n \"3\",\r\n \"4\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"Storage Account Availability Alert Severity\",\r\n \"description\": \"Severity of the alert\"\r\n }\r\n },\r\n \"StorageAccountAvailabilityWindowSize\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\",\r\n \"PT6H\",\r\n \"PT12H\",\r\n \"P1D\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"Storage Account Availability Alert Window Size\",\r\n \"description\": \"Window size for the alert\"\r\n }\r\n },\r\n \"StorageAccountAvailabilityFrequency\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"PT5M\",\r\n \"allowedValues\": [\r\n \"PT1M\",\r\n \"PT5M\",\r\n \"PT15M\",\r\n \"PT30M\",\r\n \"PT1H\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"Storage Account Availability Alert Evaluation Frequency\",\r\n \"description\": \"Evaluation frequency for the alert\"\r\n }\r\n },\r\n \"StorageAccountAvailabilityPolicyEffect\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"deployIfNotExists\",\r\n \"allowedValues\": [\r\n \"deployIfNotExists\",\r\n \"disabled\"\r\n ],\r\n \"metadata\": {\r\n \"displayName\": \"Storage Account Availability Alert Policy Effect\",\r\n \"description\": \"Policy effect for the alert, deployIfNotExists will create the alert if it does not exist, disabled will not create the alert\"\r\n }\r\n },\r\n \"StorageAccountAvailabilityAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"Storage Account Availability Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n }\r\n },\r\n \"StorageAccountAvailabilityThreshold\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"90\",\r\n \"metadata\": {\r\n \"displayName\": \"Storage Account Availability Alert Threshold\",\r\n \"description\": \"Threshold for the alert\"\r\n }\r\n },\r\n \"activityLAWDeleteAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"Activity Log Alert Delete Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n }\r\n },\r\n \"activityLAWKeyRegenAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"Activity Log Alert Key Regen Alert State\",\r\n \"description\": \"Alert state for the alert\"\r\n }\r\n }\r\n },\r\n \"policyDefinitions\": [\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityLAWDelete\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_LAWorkspace_Delete')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityLAWDeleteAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_activityLAWKeyRegen\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_LAWorkspace_KeyRegen')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('activityLAWKeyRegenAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_AATotalJob\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AA_TotalJob_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('AATotalJobAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('AATotalJobAlertWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('AATotalJobAlertEvaluationFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('AATotalJobAlertPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('AATotalJobAlertAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('AATotalJobAlertThreshold')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_RVBackupHealth\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_RecoveryVault_BackupHealthMonitor_Alert')]\",\r\n \"parameters\": {\r\n \"effect\": {\r\n \"value\": \"[[parameters('RVBackupHealthPolicyEffect')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_StorageAccountAvailability\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_StorageAccount_Availability_Alert')]\",\r\n \"parameters\": {\r\n \"severity\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityAlertSeverity')]\"\r\n },\r\n \"windowSize\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityWindowSize')]\"\r\n },\r\n \"evaluationFrequency\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityFrequency')]\"\r\n },\r\n \"effect\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityPolicyEffect')]\"\r\n },\r\n \"enabled\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityAlertState')]\"\r\n },\r\n \"threshold\": {\r\n \"value\": \"[[parameters('StorageAccountAvailabilityThreshold')]\"\r\n }\r\n }\r\n }\r\n ],\r\n \"policyType\": \"Custom\",\r\n \"policyDefinitionGroups\": null\r\n }\r\n}\r\n", + "$fxv#91": "{\r\n \"type\": \"Microsoft.Authorization/policySetDefinitions\",\r\n \"apiVersion\": \"2021-06-01\",\r\n \"name\": \"Alerting-ServiceHealth\",\r\n \"properties\": {\r\n \"displayName\": \"Deploy Azure Monitor Baseline Alerts for Service Health\",\r\n \"description\": \"Initiative to deploy AMBA Service Health alerts to Azure services\",\r\n \"metadata\": {\r\n \"version\": \"1.1.0\",\r\n \"category\": \"Monitoring\",\r\n \"source\": \"https://github.com/Azure/azure-monitor-baseline-alerts/\",\r\n \"alzCloudEnvironments\": [\r\n \"AzureCloud\"\r\n ],\r\n \"_deployed_by_amba\": true\r\n },\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"ALZ-Monitoring-RG\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Name\",\r\n \"description\": \"Name of the resource group to deploy the alerts to\"\r\n }\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"type\": \"Object\",\r\n \"defaultValue\": {\r\n \"_deployed_by_alz_monitor\": true\r\n },\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Tags\",\r\n \"description\": \"Tags to apply to the resource group\"\r\n }\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"type\": \"String\",\r\n \"defaultValue\": \"centralus\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Group Location\",\r\n \"description\": \"Location of the resource group\"\r\n }\r\n },\r\n \"ResHlthUnhealthyAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"Resource Health Unhealthy Alert State\",\r\n \"description\": \"State of the Resource Health Unhealthy alert\"\r\n }\r\n },\r\n \"SvcHlthAdvisoryAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"Service Health Advisory Alert State\",\r\n \"description\": \"State of the Service Health Advisory alert\"\r\n }\r\n },\r\n \"SvcHlthIncidentAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"Service Health Incident Alert State\",\r\n \"description\": \"State of the Service Health Incident alert\"\r\n }\r\n },\r\n \"SvcHlthMaintenanceAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"Service Health Maintenance Alert State\",\r\n \"description\": \"State of the Service Health Maintenance alert\"\r\n }\r\n },\r\n \"svcHlthSecAdvisoryAlertState\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"true\",\r\n \"metadata\": {\r\n \"displayName\": \"Service Health Security Advisory Alert State\",\r\n \"description\": \"State of the Service Health Security Advisory alert\"\r\n }\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"action@mail.com\",\r\n \"metadata\": {\r\n \"displayName\": \"Action Group Email\",\r\n \"description\": \"Email address to send alerts to\"\r\n }\r\n },\r\n \"MonitorDisable\": {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"MonitorDisable\",\r\n \"metadata\": {\r\n \"displayName\": \"Monitor Disable\",\r\n \"description\": \"Disable the Monitor\"\r\n }\r\n }\r\n },\r\n \"policyDefinitions\": [\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_ResHlthUnhealthy\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ResourceHealth_Unhealthy_Alert')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('ResHlthUnhealthyAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_SvcHlthAdvisory\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_HealthAdvisory')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('SvcHlthAdvisoryAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_SvcHlthIncident\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_Incident')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('SvcHlthIncidentAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_SvcHlthMaintenance\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_Maintenance')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('SvcHlthMaintenanceAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_svcHlthSecAdvisory\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_activitylog_ServiceHealth_SecurityAdvisory')]\",\r\n \"parameters\": {\r\n \"enabled\": {\r\n \"value\": \"[[parameters('svcHlthSecAdvisoryAlertState')]\"\r\n },\r\n \"alertResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"alertResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"alertResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"policyDefinitionReferenceId\": \"ALZ_AlertProcessing_Rule\",\r\n \"policyDefinitionId\": \"[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AlertProcessing_Rule')]\",\r\n \"parameters\": {\r\n \"ALZMonitorResourceGroupName\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupName')]\"\r\n },\r\n \"ALZMonitorResourceGroupTags\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupTags')]\"\r\n },\r\n \"ALZMonitorResourceGroupLocation\": {\r\n \"value\": \"[[parameters('ALZMonitorResourceGroupLocation')]\"\r\n },\r\n \"ALZMonitorActionGroupEmail\": {\r\n \"value\": \"[[parameters('ALZMonitorActionGroupEmail')]\"\r\n },\r\n \"MonitorDisable\": {\r\n \"value\": \"[[parameters('MonitorDisable')]\"\r\n }\r\n }\r\n }\r\n ],\r\n \"policyType\": \"Custom\",\r\n \"policyDefinitionGroups\": null\r\n }\r\n}\r\n", "cloudEnv": "[environment().name]", "defaultDeploymentLocationByCloudType": { "AzureCloud": "northeurope", @@ -275,7 +9361,26 @@ "[variables('$fxv#64')]", "[variables('$fxv#65')]", "[variables('$fxv#66')]", - "[variables('$fxv#67')]" + "[variables('$fxv#67')]", + "[variables('$fxv#68')]", + "[variables('$fxv#69')]", + "[variables('$fxv#70')]", + "[variables('$fxv#71')]", + "[variables('$fxv#72')]", + "[variables('$fxv#73')]", + "[variables('$fxv#74')]", + "[variables('$fxv#75')]", + "[variables('$fxv#76')]", + "[variables('$fxv#77')]", + "[variables('$fxv#78')]", + "[variables('$fxv#79')]", + "[variables('$fxv#80')]", + "[variables('$fxv#81')]", + "[variables('$fxv#82')]", + "[variables('$fxv#83')]", + "[variables('$fxv#84')]", + "[variables('$fxv#85')]", + "[variables('$fxv#86')]" ], "AzureCloud": [], "AzureChinaCloud": [], @@ -283,11 +9388,11 @@ }, "loadPolicySetDefinitions": { "All": [ - "[variables('$fxv#68')]", - "[variables('$fxv#69')]", - "[variables('$fxv#70')]", - "[variables('$fxv#71')]", - "[variables('$fxv#72')]" + "[string(variables('$fxv#87'))]", + "[variables('$fxv#88')]", + "[string(variables('$fxv#89'))]", + "[variables('$fxv#90')]", + "[variables('$fxv#91')]" ], "AzureCloud": [], "AzureChinaCloud": [], diff --git a/patterns/alz/policySetDefinitions/Deploy-Connectivity-Alerts.json b/patterns/alz/policySetDefinitions/Deploy-Connectivity-Alerts.json index 464b25eb5..1df24c0a4 100644 --- a/patterns/alz/policySetDefinitions/Deploy-Connectivity-Alerts.json +++ b/patterns/alz/policySetDefinitions/Deploy-Connectivity-Alerts.json @@ -17,17 +17,29 @@ "parameters": { "ALZMonitorResourceGroupName": { "type": "String", - "defaultValue": "ALZ-Monitoring-RG" + "defaultValue": "ALZ-Monitoring-RG", + "metadata": { + "displayName": "ALZ Monitor Resource Group Name", + "description": "Name of the resource group where the ALZ Monitor resources will be deployed" + } }, "ALZMonitorResourceGroupTags": { "type": "Object", "defaultValue": { - "_deployed_by_amba": true + "_deployed_by_alz_monitor": true + }, + "metadata": { + "displayName": "ALZ Monitor Resource Group Tags", + "description": "Tags to be applied to the resource group where the ALZ Monitor resources will be deployed" } }, "ALZMonitorResourceGroupLocation": { "type": "String", - "defaultValue": "centralus" + "defaultValue": "centralus", + "metadata": { + "displayName": "ALZ Monitor Resource Group Location", + "description": "Location of the resource group where the ALZ Monitor resources will be deployed" + } }, "ERCIRQoSDropBitsinPerSecAlertSeverity": { "type": "String", @@ -38,7 +50,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Alert Severity", + "description": "Severity of the alert" + } }, "ERCIRQoSDropBitsinPerSecWindowSize": { "type": "string", @@ -52,7 +68,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Window Size", + "description": "Window size for the alert" + } }, "ERCIRQoSDropBitsinPerSecEvaluationFrequency": { "type": "string", @@ -63,7 +83,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "ERCIRQoSDropBitsinPerSecPolicyEffect": { "type": "string", @@ -71,11 +95,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "ERCIRQoSDropBitsinPerSecAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "ERC IRQoS Drop Bits in Per Sec Alert State", + "description": "Alert state for the alert" + } }, "ERCIRQoSDropBitsoutPerSecAlertSeverity": { "type": "String", @@ -86,7 +118,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Alert Severity", + "description": "Severity of the alert" + } }, "ERCIRQoSDropBitsoutPerSecWindowSize": { "type": "string", @@ -100,7 +136,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Window Size", + "description": "Window size for the alert" + } }, "ERCIRQoSDropBitsoutPerSecEvaluationFrequency": { "type": "string", @@ -111,7 +151,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "ERCIRQoSDropBitsoutPerSecPolicyEffect": { "type": "string", @@ -119,11 +163,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "ERCIRQoSDropBitsoutPerSecAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "ERC IRQoS Drop Bits out Per Sec Alert State", + "description": "Alert state for the alert" + } }, "VPNGwBGPPeerStatusAlertSeverity": { "type": "String", @@ -134,7 +186,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VPN Gw BGP Peer Status Alert Severity", + "description": "Severity of the alert" + } }, "VPNGwBGPPeerStatusWindowSize": { "type": "string", @@ -148,7 +204,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VPN Gw BGP Peer Status Window Size", + "description": "Window size for the alert" + } }, "VPNGwBGPPeerStatusEvaluationFrequency": { "type": "string", @@ -159,7 +219,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VPN Gw BGP Peer Status Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VPNGwBGPPeerStatusPolicyEffect": { "type": "string", @@ -167,15 +231,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VPN Gw BGP Peer Status Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VPNGwBGPPeerStatusAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VPN Gw BGP Peer Status Alert State", + "description": "Alert state for the alert" + } }, "VPNGwBGPPeerStatusThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VPN Gw BGP Peer Status Threshold", + "description": "Threshold for the alert" + } }, "VnetGwERCpuUtilAlertSeverity": { "type": "String", @@ -186,7 +262,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Alert Severity", + "description": "Severity of the alert" + } }, "VnetGwERCpuUtilWindowSize": { "type": "string", @@ -200,7 +280,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Window Size", + "description": "Window size for the alert" + } }, "VnetGwERCpuUtilEvaluationFrequency": { "type": "string", @@ -211,7 +295,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VnetGwERCpuUtilPolicyEffect": { "type": "string", @@ -219,15 +307,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VnetGwERCpuUtilAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Alert State", + "description": "Alert state for the alert" + } }, "VnetGwERCpuUtilThreshold": { "type": "string", - "defaultValue": "80" + "defaultValue": "80", + "metadata": { + "displayName": "Vnet Gw ER Cpu Util Threshold", + "description": "Threshold for the alert" + } }, "VnetGwTunnelBWAlertSeverity": { "type": "String", @@ -238,7 +338,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel BW Alert Severity", + "description": "Severity of the alert" + } }, "VnetGwTunnelBWWindowSize": { "type": "string", @@ -252,7 +356,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel BW Window Size", + "description": "Window size for the alert" + } }, "VnetGwTunnelBWEvaluationFrequency": { "type": "string", @@ -263,7 +371,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel BW Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VnetGwTunnelBWPolicyEffect": { "type": "string", @@ -271,15 +383,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel BW Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VnetGwTunnelBWAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel BW Alert State", + "description": "Alert state for the alert" + } }, "VnetGwTunnelBWThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "Vnet Gw Tunnel BW Threshold", + "description": "Threshold for the alert" + } }, "VnetGwTunnelEgressAlertSeverity": { "type": "String", @@ -290,7 +414,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Alert Severity", + "description": "Severity of the alert" + } }, "VnetGwTunnelEgressWindowSize": { "type": "string", @@ -304,7 +432,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Window Size", + "description": "Window size for the alert" + } }, "VnetGwTunnelEgressEvaluationFrequency": { "type": "string", @@ -315,7 +447,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VnetGwTunnelEgressPolicyEffect": { "type": "string", @@ -323,15 +459,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VnetGwTunnelEgressAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Alert State", + "description": "Alert state for the alert" + } }, "VnetGwTunnelEgressThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Threshold", + "description": "Threshold for the alert" + } }, "VnetGwTunnelIngressAlertSeverity": { "type": "String", @@ -342,7 +490,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Alert Severity", + "description": "Severity of the alert" + } }, "VnetGwTunnelIngressWindowSize": { "type": "string", @@ -356,7 +508,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Window Size", + "description": "Window size for the alert" + } }, "VnetGwTunnelIngressEvaluationFrequency": { "type": "string", @@ -367,7 +523,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VnetGwTunnelIngressPolicyEffect": { "type": "string", @@ -375,15 +535,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VnetGwTunnelIngressAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Alert State", + "description": "Alert state for the alert" + } }, "VnetGwTunnelIngressThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Threshold", + "description": "Threshold for the alert" + } }, "VPNGWBandWidthUtilAlertSeverity": { "type": "String", @@ -394,7 +566,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VPN GW Band Width Util Alert Severity", + "description": "Severity of the alert" + } }, "VPNGWBandWidthUtilWindowSize": { "type": "string", @@ -408,7 +584,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VPN GW Band Width Util Window Size", + "description": "Window size for the alert" + } }, "VPNGWBandWidthUtilEvaluationFrequency": { "type": "string", @@ -419,7 +599,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VPN GW Band Width Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VPNGWBandWidthUtilPolicyEffect": { "type": "string", @@ -427,15 +611,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VPN GW Band Width Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VPNGWBandWidthUtilAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Band Width Util Alert State", + "description": "Alert state for the alert" + } }, "VPNGWBandWidthUtilThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VPN GW Band Width Util Threshold", + "description": "Threshold for the alert" + } }, "VPNGWEgressAlertSeverity": { "type": "String", @@ -446,7 +642,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VPN GW Egress Alert Severity", + "description": "Severity of the alert" + } }, "VPNGWEgressWindowSize": { "type": "string", @@ -460,7 +660,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VPN GW Egress Window Size", + "description": "Window size for the alert" + } }, "VPNGWEgressEvaluationFrequency": { "type": "string", @@ -471,7 +675,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VPN GW Egress Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VPNGWEgressPolicyEffect": { "type": "string", @@ -479,15 +687,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VPN GW Egress Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VPNGWEgressAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Egress Alert State", + "description": "Alert state for the alert" + } }, "VPNGWEgressThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VPN GW Egress Threshold", + "description": "Threshold for the alert" + } }, "VPNGWTunnelEgressPacketDropCountAlertSeverity": { "type": "String", @@ -498,7 +718,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Count Alert Severity", + "description": "Severity of the alert" + } }, "VPNGWTunnelEgressPacketDropCountWindowSize": { "type": "string", @@ -512,7 +736,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Count Window Size", + "description": "Window size for the alert" + } }, "VPNGWTunnelEgressPacketDropCountFrequency": { "type": "string", @@ -523,7 +751,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Count Frequency", + "description": "Evaluation frequency for the alert" + } }, "VPNGWTunnelEgressPacketDropCountPolicyEffect": { "type": "string", @@ -531,7 +763,11 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VPNGWTunnelEgressPacketDropCountAlertState": { "type": "string", @@ -546,7 +782,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Alert Severity", + "description": "Severity of the alert" + } }, "VPNGWTunnelEgressPacketDropMismatchWindowSize": { "type": "string", @@ -560,7 +800,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Window Size", + "description": "Window size for the alert" + } }, "VPNGWTunnelEgressPacketDropMismatchFrequency": { "type": "string", @@ -571,7 +815,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Frequency", + "description": "Evaluation frequency for the alert" + } }, "VPNGWTunnelEgressPacketDropMismatchPolicyEffect": { "type": "string", @@ -579,11 +827,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VPNGWTunnelEgressPacketDropMismatchAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Tunnel Egress Packet Drop Mismatch Alert State", + "description": "Alert state for the alert" + } }, "VPNGWIngressAlertSeverity": { "type": "string", @@ -594,7 +850,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VPN GW Ingress Alert Severity", + "description": "Severity of the alert" + } }, "VPNGWIngressWindowSize": { "type": "string", @@ -608,7 +868,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VPN GW Ingress Window Size", + "description": "Window size for the alert" + } }, "VPNGWIngressEvaluationFrequency": { "type": "string", @@ -619,7 +883,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VPN GW Ingress Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VPNGWIngressPolicyEffect": { "type": "string", @@ -627,19 +895,35 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VPN GW Ingress Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VPNGWIngressAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Ingress Alert State", + "description": "Alert state for the alert" + } }, "VPNGWIngressThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VPN GW Ingress Threshold", + "description": "Threshold for the alert" + } }, "VPNGWIngressAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Ingress Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VPNGWTunnelIngressPacketDropCountAlertSeverity": { "type": "String", @@ -650,7 +934,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Alert Severity", + "description": "Severity of the alert" + } }, "VPNGWTunnelIngressPacketDropCountWindowSize": { "type": "string", @@ -664,7 +952,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Window Size", + "description": "Window size for the alert" + } }, "VPNGWTunnelIngressPacketDropCountFrequency": { "type": "string", @@ -675,7 +967,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Frequency", + "description": "Evaluation frequency for the alert" + } }, "VPNGWTunnelIngressPacketDropCountPolicyEffect": { "type": "string", @@ -683,11 +979,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VPNGWTunnelIngressPacketDropCountAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Count Alert State", + "description": "Alert state for the alert" + } }, "VPNGWTunnelIngressPacketDropMismatchAlertSeverity": { "type": "String", @@ -698,7 +1002,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Alert Severity", + "description": "Severity of the alert" + } }, "VPNGWTunnelIngressPacketDropMismatchWindowSize": { "type": "string", @@ -712,7 +1020,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Window Size", + "description": "Window size for the alert" + } }, "VPNGWTunnelIngressPacketDropMismatchFrequency": { "type": "string", @@ -723,7 +1035,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Frequency", + "description": "Evaluation frequency for the alert" + } }, "VPNGWTunnelIngressPacketDropMismatchPolicyEffect": { "type": "string", @@ -731,11 +1047,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VPNGWTunnelIngressPacketDropMismatchAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VPN GW Tunnel Ingress Packet Drop Mismatch Alert State", + "description": "Alert state for the alert" + } }, "PDNSZCapacityUtilAlertSeverity": { "type": "String", @@ -746,7 +1070,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PDNSZ Capacity Util Alert Severity", + "description": "Severity of the alert" + } }, "PDNSZCapacityUtilWindowSize": { "type": "string", @@ -760,7 +1088,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PDNSZ Capacity Util Window Size", + "description": "Window size for the alert" + } }, "PDNSZCapacityUtilEvaluationFrequency": { "type": "string", @@ -771,7 +1103,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PDNSZ Capacity Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PDNSZCapacityUtilPolicyEffect": { "type": "string", @@ -779,15 +1115,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PDNSZ Capacity Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "PDNSZCapacityUtilAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PDNSZ Capacity Util Alert State", + "description": "Alert state for the alert" + } }, "PDNSZCapacityUtilThreshold": { "type": "string", - "defaultValue": "80" + "defaultValue": "80", + "metadata": { + "displayName": "PDNSZ Capacity Util Threshold", + "description": "Threshold for the alert" + } }, "PDNSZQueryVolumeAlertSeverity": { "type": "String", @@ -798,7 +1146,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PDNSZ Query Volume Alert Severity", + "description": "Severity of the alert" + } }, "PDNSZQueryVolumeWindowSize": { "type": "string", @@ -812,7 +1164,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PDNSZ Query Volume Window Size", + "description": "Window size for the alert" + } }, "PDNSZQueryVolumeEvaluationFrequency": { "type": "string", @@ -823,7 +1179,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PDNSZ Query Volume Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PDNSZQueryVolumePolicyEffect": { "type": "string", @@ -831,15 +1191,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PDNSZ Query Volume Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "PDNSZQueryVolumeAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PDNSZ Query Volume Alert State", + "description": "Alert state for the alert" + } }, "PDNSZQueryVolumeThreshold": { "type": "string", - "defaultValue": "500" + "defaultValue": "500", + "metadata": { + "displayName": "PDNSZ Query Volume Threshold", + "description": "Threshold for the alert" + } }, "PDNSZRecordSetCapacityAlertSeverity": { "type": "String", @@ -850,7 +1222,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PDNSZ Record Set Capacity Alert Severity", + "description": "Severity of the alert" + } }, "PDNSZRecordSetCapacityWindowSize": { "type": "string", @@ -864,7 +1240,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PDNSZ Record Set Capacity Window Size", + "description": "Window size for the alert" + } }, "PDNSZRecordSetCapacityEvaluationFrequency": { "type": "string", @@ -875,7 +1255,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PDNSZ Record Set Capacity Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PDNSZRecordSetCapacityPolicyEffect": { "type": "string", @@ -883,15 +1267,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PDNSZ Record Set Capacity Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "PDNSZRecordSetCapacityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PDNSZ Record Set Capacity Alert State", + "description": "Alert state for the alert" + } }, "PDNSZRecordSetCapacityThreshold": { "type": "string", - "defaultValue": "80" + "defaultValue": "80", + "metadata": { + "displayName": "PDNSZ Record Set Capacity Threshold", + "description": "Threshold for the alert" + } }, "PDNSZRegistrationCapacityUtilAlertSeverity": { "type": "String", @@ -902,7 +1298,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Alert Severity", + "description": "Severity of the alert" + } }, "PDNSZRegistrationCapacityUtilWindowSize": { "type": "string", @@ -916,7 +1316,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Window Size", + "description": "Window size for the alert" + } }, "PDNSZRegistrationCapacityUtilEvaluationFrequency": { "type": "string", @@ -927,7 +1331,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PDNSZRegistrationCapacityUtilPolicyEffect": { "type": "string", @@ -935,15 +1343,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "PDNSZRegistrationCapacityUtilAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Alert State", + "description": "Alert state for the alert" + } }, "PDNSZRegistrationCapacityUtilThreshold": { "type": "string", - "defaultValue": "80" + "defaultValue": "80", + "metadata": { + "displayName": "PDNSZ Registration Capacity Util Threshold", + "description": "Threshold for the alert" + } }, "PIPDDoSAttackAlertSeverity": { "type": "String", @@ -954,7 +1374,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PIP DDoS Attack Alert Severity", + "description": "Severity of the alert" + } }, "PIPDDoSAttackWindowSize": { "type": "string", @@ -968,7 +1392,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PIP DDoS Attack Window Size", + "description": "Window size for the alert" + } }, "PIPDDoSAttackEvaluationFrequency": { "type": "string", @@ -979,7 +1407,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PIP DDoS Attack Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PIPDDoSAttackPolicyEffect": { "type": "string", @@ -987,15 +1419,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PIP DDoS Attack Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "PIPDDoSAttackAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PIP DDoS Attack Alert State", + "description": "Alert state for the alert" + } }, "PIPDDoSAttackThreshold": { "type": "string", - "defaultValue": "0" + "defaultValue": "0", + "metadata": { + "displayName": "PIP DDoS Attack Threshold", + "description": "Threshold for the alert" + } }, "PIPPacketsInDDoSAlertSeverity": { "type": "String", @@ -1006,7 +1450,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PIP Packets In DDoS Alert Severity", + "description": "Severity of the alert" + } }, "PIPPacketsInDDoSWindowSize": { "type": "string", @@ -1020,7 +1468,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PIP Packets In DDoS Window Size", + "description": "Window size for the alert" + } }, "PIPPacketsInDDoSEvaluationFrequency": { "type": "string", @@ -1031,7 +1483,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PIP Packets In DDoS Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PIPPacketsInDDoSPolicyEffect": { "type": "string", @@ -1039,15 +1495,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PIP Packets In DDoS Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "PIPPacketsInDDoSAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PIP Packets In DDoS Alert State", + "description": "Alert state for the alert" + } }, "PIPPacketsInDDoSThreshold": { "type": "string", - "defaultValue": "40000" + "defaultValue": "40000", + "metadata": { + "displayName": "PIP Packets In DDoS Threshold", + "description": "Threshold for the alert" + } }, "PIPVIPAvailabilityAlertSeverity": { "type": "String", @@ -1058,7 +1526,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PIP VIP Availability Alert Severity", + "description": "Severity of the alert" + } }, "PIPVIPAvailabilityWindowSize": { "type": "string", @@ -1072,7 +1544,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PIP VIP Availability Window Size", + "description": "Window size for the alert" + } }, "PIPVIPAvailabilityEvaluationFrequency": { "type": "string", @@ -1083,7 +1559,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PIP VIP Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PIPVIPAvailabilityPolicyEffect": { "type": "string", @@ -1091,15 +1571,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PIP VIP Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "PIPVIPAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PIP VIP Availability Alert State", + "description": "Alert state for the alert" + } }, "PIPVIPAvailabilityThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "PIP VIP Availability Threshold", + "description": "Threshold for the alert" + } }, "PIPBytesInDDoSAlertSeverity": { "type": "String", @@ -1110,7 +1602,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Alert Severity", + "description": "Severity of the alert" + } }, "PIPBytesInDDoSWindowSize": { "type": "string", @@ -1124,7 +1620,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Window Size", + "description": "Window size for the alert" + } }, "PIPBytesInDDoSEvaluationFrequency": { "type": "string", @@ -1135,7 +1635,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PIPBytesInDDoSPolicyEffect": { "type": "string", @@ -1143,15 +1647,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "PIPBytesInDDoSAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PIP Bytes In DDoS Alert State", + "description": "Alert state for the alert" + } }, "PIPBytesInDDoSThreshold": { "type": "string", - "defaultValue": "8000000" + "defaultValue": "8000000", + "metadata": { + "displayName": "PIP Bytes In DDoS Threshold", + "description": "Threshold for the alert" + } }, "ERGwExpressRouteBitsInAlertSeverity": { "type": "String", @@ -1162,7 +1678,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Bits In Alert Severity", + "description": "Severity of the alert" + } }, "ERGwExpressRouteBitsInWindowSize": { "type": "string", @@ -1176,7 +1696,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Bits In Window Size", + "description": "Window size for the alert" + } }, "ERGwExpressRouteBitsInEvaluationFrequency": { "type": "string", @@ -1187,7 +1711,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Bits In Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "ERGwExpressRouteBitsInPolicyEffect": { "type": "string", @@ -1195,15 +1723,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Bits In Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "ERGwExpressRouteBitsInAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "ER Gw Express Route Bits In Alert State", + "description": "Alert state for the alert" + } }, "ERGwExpressRouteBitsInThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "ER Gw Express Route Bits In Threshold", + "description": "Threshold for the alert" + } }, "ERGwExpressRouteBitsOutAlertSeverity": { "type": "String", @@ -1214,7 +1754,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Bits Out Alert Severity", + "description": "Severity of the alert" + } }, "ERGwExpressRouteBitsOutWindowSize": { "type": "string", @@ -1228,7 +1772,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Bits Out Window Size", + "description": "Window size for the alert" + } }, "ERGwExpressRouteBitsOutEvaluationFrequency": { "type": "string", @@ -1239,7 +1787,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Bits Out Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "ERGwExpressRouteBitsOutPolicyEffect": { "type": "string", @@ -1247,15 +1799,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Bits Out Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "ERGwExpressRouteBitsOutAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "ER Gw Express Route Bits Out Alert State", + "description": "Alert state for the alert" + } }, "ERGwExpressRouteBitsOutThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "ER Gw Express Route Bits Out Threshold", + "description": "Threshold for the alert" + } }, "ERGwExpressRouteCpuUtilAlertSeverity": { "type": "String", @@ -1266,7 +1830,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Alert Severity", + "description": "Severity of the alert" + } }, "ERGwExpressRouteCpuUtilWindowSize": { "type": "string", @@ -1280,7 +1848,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Window Size", + "description": "Window size for the alert" + } }, "ERGwExpressRouteCpuUtilEvaluationFrequency": { "type": "string", @@ -1291,7 +1863,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "ERGwExpressRouteCpuUtilPolicyEffect": { "type": "string", @@ -1299,15 +1875,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "ERGwExpressRouteCpuUtilAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Alert State", + "description": "Alert state for the alert" + } }, "ERGwExpressRouteCpuUtilThreshold": { "type": "string", - "defaultValue": "80" + "defaultValue": "80", + "metadata": { + "displayName": "ER Gw Express Route Cpu Util Threshold", + "description": "Threshold for the alert" + } }, "VNETDDOSAttackAlertSeverity": { "type": "String", @@ -1318,7 +1906,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VNET DDoS Attack Alert Severity", + "description": "Severity of the alert" + } }, "VNETDDOSAttackWindowSize": { "type": "string", @@ -1332,7 +1924,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VNET DDoS Attack Window Size", + "description": "Window size for the alert" + } }, "VNETDDOSAttackEvaluationFrequency": { "type": "string", @@ -1343,7 +1939,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VNET DDoS Attack Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VNETDDOSAttackPolicyEffect": { "type": "string", @@ -1351,15 +1951,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VNET DDoS Attack Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VNETDDOSAttackAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VNET DDoS Attack Alert State", + "description": "Alert state for the alert" + } }, "VNETDDOSAttackThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VNET DDoS Attack Threshold", + "description": "Threshold for the alert" + } }, "VnetGwTunnelEgressPacketDropCountAlertSeverity": { "type": "String", @@ -1370,7 +1982,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Alert Severity", + "description": "Severity of the alert" + } }, "VnetGwTunnelEgressPacketDropCountWindowSize": { "type": "string", @@ -1384,7 +2000,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Window Size", + "description": "Window size for the alert" + } }, "VnetGwTunnelEgressPacketDropCountEvaluationFrequency": { "type": "string", @@ -1395,7 +2015,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VnetGwTunnelEgressPacketDropCountPolicyEffect": { "type": "string", @@ -1403,11 +2027,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VnetGwTunnelEgressPacketDropCountAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Count Alert State", + "description": "Alert state for the alert" + } }, "VnetGwTunnelEgressPacketDropMismatchAlertSeverity": { "type": "String", @@ -1418,7 +2050,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Alert Severity", + "description": "Severity of the alert" + } }, "VnetGwTunnelEgressPacketDropMismatchWindowSize": { "type": "string", @@ -1432,7 +2068,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Window Size", + "description": "Window size for the alert" + } }, "VnetGwTunnelEgressPacketDropMismatchEvaluationFrequency": { "type": "string", @@ -1443,7 +2083,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VnetGwTunnelEgressPacketDropMismatchPolicyEffect": { "type": "string", @@ -1451,11 +2095,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VnetGwTunnelEgressPacketDropMismatchAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Egress Packet Drop Mismatch Alert State", + "description": "Alert state for the alert" + } }, "VnetGwExpressRouteBitsPerSecondAlertSeverity": { "type": "String", @@ -1466,7 +2118,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Alert Severity", + "description": "Severity of the alert" + } }, "VnetGwExpressRouteBitsPerSecondWindowSize": { "type": "string", @@ -1480,7 +2136,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Window Size", + "description": "Window size for the alert" + } }, "VnetGwExpressRouteBitsPerSecondEvaluationFrequency": { "type": "string", @@ -1491,7 +2151,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VnetGwExpressRouteBitsPerSecondPolicyEffect": { "type": "string", @@ -1499,15 +2163,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VnetGwExpressRouteBitsPerSecondAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Alert State", + "description": "Alert state for the alert" + } }, "VnetGwExpressRouteBitsPerSecondThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "Vnet Gw Express Route Bits Per Second Threshold", + "description": "Threshold for the alert" + } }, "VnetGwTunnelIngressPacketDropMismatchAlertSeverity": { "type": "String", @@ -1518,7 +2194,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Alert Severity", + "description": "Severity of the alert" + } }, "VnetGwTunnelIngressPacketDropMismatchWindowSize": { "type": "string", @@ -1532,7 +2212,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Window Size", + "description": "Window size for the alert" + } }, "VnetGwTunnelIngressPacketDropMismatchEvaluationFrequency": { "type": "string", @@ -1543,7 +2227,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VnetGwTunnelIngressPacketDropMismatchPolicyEffect": { "type": "string", @@ -1551,11 +2239,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VnetGwTunnelIngressPacketDropMismatchAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Mismatch Alert State", + "description": "Alert state for the alert" + } }, "VnetGwTunnelIngressPacketDropCountAlertSeverity": { "type": "String", @@ -1566,7 +2262,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Alert Severity", + "description": "Severity of the alert" + } }, "VnetGwTunnelIngressPacketDropCountWindowSize": { "type": "string", @@ -1580,7 +2280,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Window Size", + "description": "Window size for the alert" + } }, "VnetGwTunnelIngressPacketDropCountEvaluationFrequency": { "type": "string", @@ -1591,7 +2295,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VnetGwTunnelIngressPacketDropCountPolicyEffect": { "type": "string", @@ -1599,11 +2307,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "VnetGwTunnelIngressPacketDropCountAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Vnet Gw Tunnel Ingress Packet Drop Count Alert State", + "description": "Alert state for the alert" + } }, "ERCIRBgpAvailabilityAlertSeverity": { "type": "String", @@ -1614,7 +2330,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "ERCIR Bgp Availability Alert Severity", + "description": "Severity of the alert" + } }, "ERCIRBgpAvailabilityWindowSize": { "type": "string", @@ -1628,7 +2348,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "ERCIR Bgp Availability Window Size", + "description": "Window size for the alert" + } }, "ERCIRBgpAvailabilityEvaluationFrequency": { "type": "string", @@ -1639,7 +2363,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "ERCIR Bgp Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "ERCIRBgpAvailabilityPolicyEffect": { "type": "string", @@ -1647,15 +2375,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "ERCIR Bgp Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "ERCIRBgpAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "ERCIR Bgp Availability Alert State", + "description": "Alert state for the alert" + } }, "ERCIRBgpAvailabilityThreshold": { "type": "string", - "defaultValue": "90" + "defaultValue": "90", + "metadata": { + "displayName": "ERCIR Bgp Availability Threshold", + "description": "Threshold for the alert" + } }, "ERCIRArpAvailabilityAlertSeverity": { "type": "String", @@ -1666,7 +2406,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "ERCIR Arp Availability Alert Severity", + "description": "Severity of the alert" + } }, "ERCIRArpAvailabilityWindowSize": { "type": "string", @@ -1680,7 +2424,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "ERCIR Arp Availability Window Size", + "description": "Window size for the alert" + } }, "ERCIRArpAvailabilityFrequency": { "type": "string", @@ -1691,7 +2439,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "ERCIR Arp Availability Frequency", + "description": "Evaluation frequency for the alert" + } }, "ERCIRArpAvailabilityPolicyEffect": { "type": "string", @@ -1699,15 +2451,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "ERCIR ARP Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "ERCIRArpAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "ERCIR Arp Availability Alert State", + "description": "Alert state for the alert" + } }, "ERCIRArpAvailabilityThreshold": { "type": "string", - "defaultValue": "90" + "defaultValue": "90", + "metadata": { + "displayName": "ERCIR Arp Availability Threshold", + "description": "Threshold for the alert" + } }, "AFWSNATPortUtilizationAlertSeverity": { "type": "String", @@ -1718,7 +2482,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "AFW SNAT Port Utilization Alert Severity", + "description": "Severity of the alert" + } }, "AFWSNATPortUtilizationWindowSize": { "type": "string", @@ -1732,7 +2500,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "AFW SNAT Port Utilization Window Size", + "description": "Window size for the alert" + } }, "AFWSNATPortUtilizationFrequency": { "type": "string", @@ -1743,7 +2515,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "AFW SNAT Port Utilization Frequency", + "description": "Evaluation frequency for the alert" + } }, "AFWSNATPortUtilizationPolicyEffect": { "type": "string", @@ -1751,15 +2527,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "AFW SNAT Port Utilization Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "AFWSNATPortUtilizationAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "AFW SNAT Port Utilization Alert State", + "description": "Alert state for the alert" + } }, "AFWSNATPortUtilizationThreshold": { "type": "string", - "defaultValue": "80" + "defaultValue": "80", + "metadata": { + "displayName": "AFW SNAT Port Utilization Threshold", + "description": "Threshold for the alert" + } }, "FirewallHealthAlertSeverity": { "type": "String", @@ -1770,7 +2558,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Firewall Health Alert Severity", + "description": "Severity of the alert" + } }, "FirewallHealthWindowSize": { "type": "string", @@ -1784,7 +2576,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Firewall Health Window Size", + "description": "Window size for the alert" + } }, "FirewallHealthEvaluationFrequency": { "type": "string", @@ -1795,7 +2591,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Firewall Health Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "FirewallHealthPolicyEffect": { "type": "string", @@ -1803,31 +2603,807 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Firewall Health Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "FirewallHealthAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Firewall Health Alert State", + "description": "Alert state for the alert" + } }, "FirewallHealthThreshold": { "type": "string", - "defaultValue": "90" + "defaultValue": "90", + "metadata": { + "displayName": "Firewall Health Threshold", + "description": "Threshold for the alert" + } }, "activityFWDeleteAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity FW Delete Alert State", + "description": "Alert state for the alert" + } }, "activityNSGDeleteAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity NSG Delete Alert State", + "description": "Alert state for the alert" + } }, "activityUDRUpdateAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity UDR Update Alert State", + "description": "Alert state for the alert" + } }, "activityVPNGWDeleteAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity VPN GW Delete Alert State", + "description": "Alert state for the alert" + } + }, + "LBDatapathAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Data path Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "LBDatapathAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Data path Availability Window Size", + "description": "Window size for the alert" + } + }, + "LBDatapathAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Data path Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBDatapathAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Data path Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBDatapathAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Data path Availability Alert State", + "description": "Alert state for the alert" + } + }, + "LBGlobalBackendAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Global Backend Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "LBGlobalBackendAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Global Backend Availability Window Size", + "description": "Window size for the alert" + } + }, + "LBGlobalBackendAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Global Backend Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBGlobalBackendAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Global Backend Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBGlobalBackendAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Global Backend Availability Alert State", + "description": "Alert state for the alert" + } + }, + "LBHealthProbeStatusAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Health Probe Status Alert Severity", + "description": "Severity of the alert" + } + }, + "LBHealthProbeStatusWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Health Probe Status Window Size", + "description": "Window size for the alert" + } + }, + "LBHealthProbeStatusEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Health Probe Status Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBHealthProbeStatusPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Health Probe Status Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBHealthProbeStatusAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Health Probe Status Alert State", + "description": "Alert state for the alert" + } + }, + "LBUsedSNATPortsAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Alert Severity", + "description": "Severity of the alert" + } + }, + "LBUsedSNATPortsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Window Size", + "description": "Window size for the alert" + } + }, + "LBUsedSNATPortsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBUsedSNATPortsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBUsedSNATPortsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Used SNAT Ports Alert State", + "description": "Alert state for the alert" + } + }, + "ERPBitsInPerSecondAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Bits In Per Second Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPBitsInPerSecondWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Bits In Per Second Window Size", + "description": "Window size for the alert" + } + }, + "ERPBitsInPerSecondEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Bits In Per Second Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPBitsInPerSecondPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Bits In Per Second Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPBitsInPerSecondAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Bits In Per Second Alert State", + "description": "Alert state for the alert" + } + }, + "ERPBitsOutPerSecondAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Bits Out Per Second Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPBitsOutPerSecondWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Bits Out Per Second Window Size", + "description": "Window size for the alert" + } + }, + "ERPBitsOutPerSecondEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Bits Out Per Second Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPBitsOutPerSecondPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Bits Out Per Second Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPBitsOutPerSecondAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Bits Out Per Second Alert State", + "description": "Alert state for the alert" + } + }, + "ERPLineProtocolAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Line Protocol Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPLineProtocolWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Line Protocol Window Size", + "description": "Window size for the alert" + } + }, + "ERPLineProtocolEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Line Protocol Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPLineProtocolPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Line Protocol Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPLineProtocolAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Line Protocol Alert State", + "description": "Alert state for the alert" + } + }, + "ERPRxLightLevelHighAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Rx Light Level High Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPRxLightLevelHighWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Rx Light Level High Window Size", + "description": "Window size for the alert" + } + }, + "ERPRxLightLevelHighEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Rx Light Level High Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPRxLightLevelHighPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Rx Light Level High Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPRxLightLevelHighAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Rx Light Level High Alert State", + "description": "Alert state for the alert" + } + }, + "ERPRxLightLevelLowAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Rx Light Level Low Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPRxLightLevelLowWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Rx Light Level Low Window Size", + "description": "Window size for the alert" + } + }, + "ERPRxLightLevelLowEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Rx Light Level Low Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPRxLightLevelLowPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Rx Light Level Low Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPRxLightLevelLowAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Rx Light Level Low Alert State", + "description": "Alert state for the alert" + } + }, + "ERPTxLightLevelHighAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Tx Light Level High Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPTxLightLevelHighWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Tx Light Level High Window Size", + "description": "Window size for the alert" + } + }, + "ERPTxLightLevelHighEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Tx Light Level High Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPTxLightLevelHighPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Tx Light Level High Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPTxLightLevelHighAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Tx Light Level High Alert State", + "description": "Alert state for the alert" + } + }, + "ERPTxLightLevelLowAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": [ + "0", + "1", + "2", + "3", + "4" + ], + "metadata": { + "displayName": "ERP Tx Light Level Low Alert Severity", + "description": "Severity of the alert" + } + }, + "ERPTxLightLevelLowWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "ERP Tx Light Level Low Window Size", + "description": "Window size for the alert" + } + }, + "ERPTxLightLevelLowEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H" + ], + "metadata": { + "displayName": "ERP Tx Light Level Low Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "ERPTxLightLevelLowPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": [ + "deployIfNotExists", + "disabled" + ], + "metadata": { + "displayName": "ERP Tx Light Level Low Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "ERPTxLightLevelLowAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "ERP Tx Light Level Low Alert State", + "description": "Alert state for the alert" + } } }, "policyDefinitions": [ @@ -2715,6 +4291,237 @@ "value": "[[parameters('ALZMonitorResourceGroupLocation')]" } } + }, + { + "policyDefinitionReferenceId": "ALZ_LBDataPathAvailability", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_DataPathAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('LBDataPathAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('LBDataPathAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('LBDataPathAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('LBDataPathAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('LBDataPathAvailabilityAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBGlobalBackendAvailability", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_GlobalBackendAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('LBGlobalBackendAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('LBGlobalBackendAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('LBGlobalBackendAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('LBGlobalBackendAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('LBGlobalBackendAvailabilityAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBHealthProbeStatus", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_HealthProbeStatus_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('LBHealthProbeStatusAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('LBHealthProbeStatusWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('LBHealthProbeStatusEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('LBHealthProbeStatusPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('LBHealthProbeStatusAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBUsedSNATPorts", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_UsedSNATPorts_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('LBUsedSNATPortsAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('LBUsedSNATPortsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('LBUsedSNATPortsEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('LBUsedSNATPortsPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('LBUsedSNATPortsAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPBitsInPerSecond", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRouteBitsIn_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('ERPBitsInPerSecondAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('ERPBitsInPerSecondWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('ERPBitsInPerSecondEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('ERPBitsInPerSecondPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('ERPBitsInPerSecondAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPBitsOutPerSecond", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRouteBitsOut_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('ERPBitsOutPerSecondAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('ERPBitsOutPerSecondWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('ERPBitsOutPerSecondEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('ERPBitsOutPerSecondPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('ERPBitsOutPerSecondAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPLineProtocol", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutLineProtocol_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('ERPLineProtocolAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('ERPLineProtocolWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('ERPLineProtocolEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('ERPLineProtocolPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('ERPLineProtocolAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPRxLightLevelHigh", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutRxLightLevell_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('ERPRxLightLevelHighAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('ERPRxLightLevelHighWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('ERPRxLightLevelHighEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('ERPRxLightLevelHighPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('ERPRxLightLevelHighAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPRxLightLevelLow", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutRxLightLevellow_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('ERPRxLightLevelLowAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('ERPRxLightLevelLowWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('ERPRxLightLevelLowEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('ERPRxLightLevelLowPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('ERPRxLightLevelLowAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPTxLightLevelHigh", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutTxLightLevell_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('ERPTxLightLevelHighAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('ERPTxLightLevelHighWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('ERPTxLightLevelHighEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('ERPTxLightLevelHighPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('ERPTxLightLevelHighAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_ERPTxLightLevelLow", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ERP_ExpressRoutTxLightLevellow_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('ERPTxLightLevelLowAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('ERPTxLightLevelLowWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('ERPTxLightLevelLowEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('ERPTxLightLevelLowPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('ERPTxLightLevelLowAlertState')]" + } + } } ], "policyType": "Custom", diff --git a/patterns/alz/policySetDefinitions/Deploy-Identity-Alerts.json b/patterns/alz/policySetDefinitions/Deploy-Identity-Alerts.json index cd59230fb..e10904831 100644 --- a/patterns/alz/policySetDefinitions/Deploy-Identity-Alerts.json +++ b/patterns/alz/policySetDefinitions/Deploy-Identity-Alerts.json @@ -17,17 +17,29 @@ "parameters": { "ALZMonitorResourceGroupName": { "type": "String", - "defaultValue": "ALZ-Monitoring-RG" + "defaultValue": "ALZ-Monitoring-RG", + "metadata": { + "displayName": "ALZ Monitor Resource Group Name", + "description": "Name of the resource group where the alerting resources will be deployed" + } }, "ALZMonitorResourceGroupTags": { "type": "Object", "defaultValue": { - "_deployed_by_amba": true + "_deployed_by_alz_monitor": true + }, + "metadata": { + "displayName": "ALZ Monitor Resource Group Tags", + "description": "Tags for the resource group where the alerting resources will be deployed" } }, "ALZMonitorResourceGroupLocation": { "type": "String", - "defaultValue": "centralus" + "defaultValue": "centralus", + "metadata": { + "displayName": "ALZ Monitor Resource Group Location", + "description": "Location of the resource group where the alerting resources will be deployed" + } }, "KVRequestAlertSeverity": { "type": "String", @@ -38,7 +50,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "KeyVault Request Alert Severity", + "description": "Severity of the alert" + } }, "KVRequestWindowSize": { "type": "string", @@ -52,7 +68,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "KeyVault Request Alert Window Size", + "description": "Window size for the alert" + } }, "KVRequestEvaluationFrequency": { "type": "string", @@ -63,7 +83,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "KeyVault Request Alert Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "KVRequestPolicyEffect": { "type": "string", @@ -71,11 +95,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "KeyVault Request Alert Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "KVRequestAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "KeyVault Request Alert State", + "description": "State of the alert, true will enable the alert, false will disable the alert" + } }, "KvAvailabilityAlertSeverity": { "type": "String", @@ -86,7 +118,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "KeyVault Availability Alert Severity", + "description": "Severity of the alert" + } }, "KvAvailabilityWindowSize": { "type": "string", @@ -100,7 +136,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "KeyVault Availability Alert Window Size", + "description": "Window size for the alert" + } }, "KvAvailabilityEvaluationFrequency": { "type": "string", @@ -111,7 +151,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "KeyVault Availability Alert Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "KvAvailabilityPolicyEffect": { "type": "string", @@ -119,15 +163,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "KeyVault Availability Alert Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "KvAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "KeyVault Availability Alert State", + "description": "State of the alert, true will enable the alert, false will disable the alert" + } }, "KVAvailabilityThreshold": { "type": "string", - "defaultValue": "20" + "defaultValue": "20", + "metadata": { + "displayName": "KeyVault Availability Alert Threshold", + "description": "Threshold for the alert" + } }, "KvLatencyAvailabilityAlertSeverity": { "type": "String", @@ -138,7 +194,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "KeyVault Latency Alert Severity", + "description": "Severity of the alert" + } }, "KvLatencyAvailabilityWindowSize": { "type": "string", @@ -152,7 +212,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "KeyVault Latency Alert Window Size", + "description": "Window size for the alert" + } }, "KvLatencyAvailabilityEvaluationFrequency": { "type": "string", @@ -163,7 +227,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "KeyVault Latency Alert Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "KvLatencyAvailabilityPolicyEffect": { "type": "string", @@ -171,15 +239,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "KeyVault Latency Alert Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "KvLatencyAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "KeyVault Latency Alert State", + "description": "State of the alert, true will enable the alert, false will disable the alert" + } }, "KvLatencyAvailabilityThreshold": { "type": "string", - "defaultValue": "1000" + "defaultValue": "1000", + "metadata": { + "displayName": "KeyVault Latency Alert Threshold", + "description": "Threshold for the alert" + } }, "KVCapacityAlertSeverity": { "type": "String", @@ -190,7 +270,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "KeyVault Capacity Alert Severity", + "description": "Severity of the alert" + } }, "KVCapacityWindowSize": { "type": "string", @@ -204,7 +288,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "KeyVault Capacity Alert Window Size", + "description": "Window size for the alert" + } }, "KVCapacityEvaluationFrequency": { "type": "string", @@ -215,7 +303,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "KeyVault Capacity Alert Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "KVCapacityPolicyEffect": { "type": "string", @@ -223,19 +315,35 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "KeyVault Capacity Alert Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } }, "KVCapacityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "KeyVault Capacity Alert State", + "description": "State of the alert, true will enable the alert, false will disable the alert" + } }, "KVCapacityThreshold": { "type": "string", - "defaultValue": "75" + "defaultValue": "75", + "metadata": { + "displayName": "KeyVault Capacity Alert Threshold", + "description": "Threshold for the alert" + } }, "activityKVDeleteAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity Log KeyVault Delete Alert State", + "description": "State of the alert, true will enable the alert, false will disable the alert" + } } }, "policyDefinitions": [ diff --git a/patterns/alz/policySetDefinitions/Deploy-LandingZone-Alerts.json b/patterns/alz/policySetDefinitions/Deploy-LandingZone-Alerts.json index 4cf6c6d57..8a6c215f8 100644 --- a/patterns/alz/policySetDefinitions/Deploy-LandingZone-Alerts.json +++ b/patterns/alz/policySetDefinitions/Deploy-LandingZone-Alerts.json @@ -17,17 +17,29 @@ "parameters": { "ALZMonitorResourceGroupName": { "type": "String", - "defaultValue": "ALZ-Monitoring-RG" + "defaultValue": "ALZ-Monitoring-RG", + "metadata": { + "displayName": "ALZ Monitor Resource Group Name", + "description": "Name of the resource group where the ALZ Monitor resources will be deployed" + } }, "ALZMonitorResourceGroupTags": { "type": "Object", "defaultValue": { - "_deployed_by_amba": true + "_deployed_by_alz_monitor": true + }, + "metadata": { + "displayName": "ALZ Monitor Resource Group Tags", + "description": "Tags for the resource group where the ALZ Monitor resources will be deployed" } }, "ALZMonitorResourceGroupLocation": { "type": "String", - "defaultValue": "centralus" + "defaultValue": "centralus", + "metadata": { + "displayName": "ALZ Monitor Resource Group Location", + "description": "Location of the resource group where the ALZ Monitor resources will be deployed" + } }, "KVRequestAlertSeverity": { "type": "String", @@ -38,7 +50,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Key Vault Request Alert Severity", + "description": "Severity of the alert for Key Vault Request" + } }, "KVRequestWindowSize": { "type": "string", @@ -52,7 +68,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Key Vault Request Window Size", + "description": "Window size for the alert" + } }, "KVRequestEvaluationFrequency": { "type": "string", @@ -63,7 +83,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Key Vault Request Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "KVRequestPolicyEffect": { "type": "string", @@ -71,11 +95,19 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Key Vault Request Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "KVRequestAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Key Vault Request Alert State", + "description": "Alert state for the alert" + } }, "KvAvailabilityAlertSeverity": { "type": "String", @@ -86,7 +118,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Key Vault Availability Alert Severity", + "description": "Severity of the alert for Key Vault Availability" + } }, "KvAvailabilityWindowSize": { "type": "string", @@ -100,7 +136,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Key Vault Availability Window Size", + "description": "Window size for the alert" + } }, "KvAvailabilityEvaluationFrequency": { "type": "string", @@ -111,7 +151,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Key Vault Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "KvAvailabilityPolicyEffect": { "type": "string", @@ -119,15 +163,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Key Vault Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "KvAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Key Vault Availability Alert State", + "description": "Alert state for the alert" + } }, "KVAvailabilityThreshold": { "type": "string", - "defaultValue": "20" + "defaultValue": "20", + "metadata": { + "displayName": "Key Vault Availability Threshold", + "description": "Threshold for the alert" + } }, "KvLatencyAvailabilityAlertSeverity": { "type": "String", @@ -138,7 +194,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Key Vault Latency Availability Alert Severity", + "description": "Severity of the alert for Key Vault Latency Availability" + } }, "KvLatencyAvailabilityWindowSize": { "type": "string", @@ -152,7 +212,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Key Vault Latency Availability Window Size", + "description": "Window size for the alert" + } }, "KvLatencyAvailabilityEvaluationFrequency": { "type": "string", @@ -163,7 +227,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Key Vault Latency Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "KvLatencyAvailabilityPolicyEffect": { "type": "string", @@ -171,15 +239,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Key Vault Latency Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "KvLatencyAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Key Vault Latency Availability Alert State", + "description": "Alert state for the alert" + } }, "KvLatencyAvailabilityThreshold": { "type": "string", - "defaultValue": "1000" + "defaultValue": "1000", + "metadata": { + "displayName": "Key Vault Latency Availability Threshold", + "description": "Threshold for the alert" + } }, "KVCapacityAlertSeverity": { "type": "String", @@ -190,7 +270,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Key Vault Capacity Alert Severity", + "description": "Severity of the alert for Key Vault Capacity" + } }, "KVCapacityWindowSize": { "type": "string", @@ -204,7 +288,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Key Vault Capacity Window Size", + "description": "Window size for the alert" + } }, "KVCapacityEvaluationFrequency": { "type": "string", @@ -215,7 +303,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Key Vault Capacity Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "KVCapacityPolicyEffect": { "type": "string", @@ -223,19 +315,35 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Key Vault Capacity Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "KVCapacityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Key Vault Capacity Alert State", + "description": "Alert state for the alert" + } }, "KVCapacityThreshold": { "type": "string", - "defaultValue": "75" + "defaultValue": "75", + "metadata": { + "displayName": "Key Vault Capacity Threshold", + "description": "Threshold for the alert" + } }, "activityKVDeleteAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity Key Vault Delete Alert State", + "description": "Alert state for the alert" + } }, "StorageAccountAvailabilityAlertSeverity": { "type": "String", @@ -246,7 +354,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Storage Account Availability Alert Severity", + "description": "Severity of the alert for Storage Account Availability" + } }, "StorageAccountAvailabilityWindowSize": { "type": "string", @@ -260,7 +372,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Storage Account Availability Window Size", + "description": "Window size for the alert" + } }, "StorageAccountAvailabilityFrequency": { "type": "string", @@ -271,7 +387,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Storage Account Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "StorageAccountAvailabilityPolicyEffect": { "type": "string", @@ -279,15 +399,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Storage Account Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "StorageAccountAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Storage Account Availability Alert State", + "description": "Alert state for the alert" + } }, "StorageAccountAvailabilityThreshold": { "type": "string", - "defaultValue": "90" + "defaultValue": "90", + "metadata": { + "displayName": "Storage Account Availability Threshold", + "description": "Threshold for the alert" + } }, "PIPDDoSAttackAlertSeverity": { "type": "String", @@ -298,7 +430,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PIP DDoS Attack Alert Severity", + "description": "Severity of the alert for PIP DDoS Attack" + } }, "PIPDDoSAttackWindowSize": { "type": "string", @@ -312,7 +448,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PIP DDoS Attack Window Size", + "description": "Window size for the alert" + } }, "PIPDDoSAttackEvaluationFrequency": { "type": "string", @@ -323,7 +463,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PIP DDoS Attack Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PIPDDoSAttackPolicyEffect": { "type": "string", @@ -331,15 +475,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PIP DDoS Attack Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "PIPDDoSAttackAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PIP DDoS Attack Alert State", + "description": "Alert state for the alert" + } }, "PIPDDoSAttackThreshold": { "type": "string", - "defaultValue": "0" + "defaultValue": "0", + "metadata": { + "displayName": "PIP DDoS Attack Threshold", + "description": "Threshold for the alert" + } }, "PIPPacketsInDDoSAlertSeverity": { "type": "String", @@ -350,7 +506,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PIP Packets In DDoS Alert Severity", + "description": "Severity of the alert for PIP Packets In DDoS" + } }, "PIPPacketsInDDoSWindowSize": { "type": "string", @@ -364,7 +524,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PIP Packets In DDoS Window Size", + "description": "Window size for the alert" + } }, "PIPPacketsInDDoSEvaluationFrequency": { "type": "string", @@ -375,7 +539,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PIP Packets In DDoS Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PIPPacketsInDDoSPolicyEffect": { "type": "string", @@ -383,15 +551,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PIP Packets In DDoS Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "PIPPacketsInDDoSAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PIP Packets In DDoS Alert State", + "description": "Alert state for the alert" + } }, "PIPPacketsInDDoSThreshold": { "type": "string", - "defaultValue": "40000" + "defaultValue": "40000", + "metadata": { + "displayName": "PIP Packets In DDoS Threshold", + "description": "Threshold for the alert" + } }, "PIPVIPAvailabilityAlertSeverity": { "type": "String", @@ -402,7 +582,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PIP VIP Availability Alert Severity", + "description": "Severity of the alert for PIP VIP Availability" + } }, "PIPVIPAvailabilityWindowSize": { "type": "string", @@ -416,7 +600,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PIP VIP Availability Window Size", + "description": "Window size for the alert" + } }, "PIPVIPAvailabilityEvaluationFrequency": { "type": "string", @@ -427,7 +615,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PIP VIP Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PIPVIPAvailabilityPolicyEffect": { "type": "string", @@ -435,15 +627,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PIP VIP Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "PIPVIPAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PIP VIP Availability Alert State", + "description": "Alert state for the alert" + } }, "PIPVIPAvailabilityThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "PIP VIP Availability Threshold", + "description": "Threshold for the alert" + } }, "PIPBytesInDDoSAlertSeverity": { "type": "String", @@ -454,7 +658,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Alert Severity", + "description": "Severity of the alert for PIP Bytes In DDoS" + } }, "PIPBytesInDDoSWindowSize": { "type": "string", @@ -468,7 +676,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Window Size", + "description": "Window size for the alert" + } }, "PIPBytesInDDoSEvaluationFrequency": { "type": "string", @@ -479,7 +691,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "PIPBytesInDDoSPolicyEffect": { "type": "string", @@ -487,15 +703,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "PIP Bytes In DDoS Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "PIPBytesInDDoSAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "PIP Bytes In DDoS Alert State", + "description": "Alert state for the alert" + } }, "PIPBytesInDDoSThreshold": { "type": "string", - "defaultValue": "8000000" + "defaultValue": "8000000", + "metadata": { + "displayName": "PIP Bytes In DDoS Threshold", + "description": "Threshold for the alert" + } }, "RVBackupHealthMonitorPolicyEffect": { "type": "string", @@ -504,7 +732,11 @@ "modify", "audit", "disabled" - ] + ], + "metadata": { + "displayName": "Recovery Vault Backup Health Monitor Policy Effect", + "description": "Policy effect for the alert, modify will modify the alert if it exists, or audit if it does not exist" + } }, "VNETDDOSAttackAlertSeverity": { "type": "String", @@ -515,7 +747,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VNET DDoS Attack Alert Severity", + "description": "Severity of the alert for VNET DDoS Attack" + } }, "VNETDDOSAttackWindowSize": { "type": "string", @@ -529,7 +765,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VNET DDoS Attack Window Size", + "description": "Window size for the alert" + } }, "VNETDDOSAttackEvaluationFrequency": { "type": "string", @@ -540,7 +780,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VNET DDoS Attack Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VNETDDOSAttackPolicyEffect": { "type": "string", @@ -548,23 +792,43 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VNET DDoS Attack Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VNETDDOSAttackAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VNET DDoS Attack Alert State", + "description": "Alert state for the alert" + } }, "VNETDDOSAttackThreshold": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VNET DDoS Attack Threshold", + "description": "Threshold for the alert" + } }, "activityNSGDeleteAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity NSG Delete Alert State", + "description": "Alert state for the alert" + } }, "activityUDRUpdateAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity UDR Update Alert State", + "description": "Alert state for the alert" + } }, "VMHeartBeatRGAlertSeverity": { "type": "String", @@ -575,7 +839,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM Heart Beat RG Alert Severity", + "description": "Severity of the alert for VM Heart Beat RG" + } }, "VMHeartBeatRGWindowSize": { "type": "string", @@ -589,7 +857,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM Heart Beat RG Window Size", + "description": "Window size for the alert" + } }, "VMHeartBeatRGEvaluationFrequency": { "type": "string", @@ -600,19 +872,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM Heart Beat RG Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMHeartBeatRGAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Heart Beat RG Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMHeartBeatRGAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Heart Beat RG Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMHeartBeatRGAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Heart Beat RG Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMHeartBeatRGPolicyEffect": { "type": "string", @@ -620,15 +908,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM Heart Beat RG Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMHeartBeatRGAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Heart Beat RG Alert State", + "description": "Alert state for the alert" + } }, "VMHeartBeatRGThreshold": { "type": "string", - "defaultValue": "10" + "defaultValue": "10", + "metadata": { + "displayName": "VM Heart Beat RG Threshold", + "description": "Threshold for the alert" + } }, "VMHeartBeatRGOperator": { "type": "string", @@ -639,7 +939,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM Heart Beat RG Operator", + "description": "Operator for the alert" + } }, "VMHeartBeatRGTimeAggregation": { "type": "string", @@ -650,7 +954,11 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM Heart Beat RG Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMNetworkInAlertSeverity": { "type": "String", @@ -661,7 +969,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM Network In Alert Severity", + "description": "Severity of the alert for VM Network In" + } }, "VMNetworkInWindowSize": { "type": "string", @@ -675,7 +987,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM Network In Window Size", + "description": "Window size for the alert" + } }, "VMNetworkInEvaluationFrequency": { "type": "string", @@ -686,19 +1002,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM Network In Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMNetworkInAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Network In Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMNetworkInAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Network In Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMNetworkInAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Network In Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMNetworkInPolicyEffect": { "type": "string", @@ -706,15 +1038,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM Network In Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMNetworkInAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Network In Alert State", + "description": "Alert state for the alert" + } }, "VMNetworkInThreshold": { "type": "string", - "defaultValue": "10000000" + "defaultValue": "10000000", + "metadata": { + "displayName": "VM Network In Threshold", + "description": "Threshold for the alert" + } }, "VMNetworkInOperator": { "type": "string", @@ -725,7 +1069,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM Network In Operator", + "description": "Operator for the alert" + } }, "VMNetworkInTimeAggregation": { "type": "string", @@ -736,27 +1084,47 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM Network In Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMNetworkInEvaluationPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Network In Evaluation Periods", + "description": "Evaluation Periods for the alert" + } }, "VMNetworkInFailingPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Network In Failing Periods", + "description": "Failing Periods for the alert" + } }, "VMNetworkInComputersToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM Network In Computers To Include", + "description": "Computers To Include for the alert" + } }, "VMNetworkInNetworkInterfaceToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM Network In Network Interface To Include", + "description": "Network Interface To Include for the alert" + } }, "VMNetworkOutAlertSeverity": { "type": "String", @@ -767,7 +1135,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM Network Out Alert Severity", + "description": "Severity of the alert for VM Network Out" + } }, "VMNetworkOutWindowSize": { "type": "string", @@ -781,7 +1153,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM Network Out Window Size", + "description": "Window size for the alert" + } }, "VMNetworkOutEvaluationFrequency": { "type": "string", @@ -792,19 +1168,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM Network Out Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMNetworkOutAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Network Out Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMNetworkOutAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Network Out Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMNetworkOutAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Network Out Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMNetworkOutPolicyEffect": { "type": "string", @@ -812,15 +1204,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM Network Out Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMNetworkOutAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Network Out Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } }, "VMNetworkOutThreshold": { "type": "string", - "defaultValue": "10000000" + "defaultValue": "10000000", + "metadata": { + "displayName": "VM Network Out Threshold", + "description": "Threshold for the alert" + } }, "VMNetworkOutOperator": { "type": "string", @@ -831,7 +1235,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM Network Out Operator", + "description": "Operator for the alert" + } }, "VMNetworkOutTimeAggregation": { "type": "string", @@ -842,27 +1250,47 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM Network Out Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMNetworkOutEvaluationPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Network Out Evaluation Periods", + "description": "Evaluation Periods for the alert" + } }, "VMNetworkOutFailingPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Network Out Failing Periods", + "description": "Failing Periods for the alert" + } }, "VMNetworkOutComputersToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM Network Out Computers To Include", + "description": "Computers To Include for the alert" + } }, "VMNetworkOutNetworkInterfaceToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM Network Out Network Interface To Include", + "description": "Network Interface To Include for the alert" + } }, "VMOSDiskReadLatencyAlertSeverity": { "type": "String", @@ -873,7 +1301,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Alert Severity", + "description": "Severity of the alert for VM OS Disk Read Latency" + } }, "VMOSDiskReadLatencyWindowSize": { "type": "string", @@ -887,7 +1319,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Window Size", + "description": "Window size for the alert" + } }, "VMOSDiskReadLatencyEvaluationFrequency": { "type": "string", @@ -898,19 +1334,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMOSDiskReadLatencyAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Read Latency Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMOSDiskReadLatencyAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Read Latency Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMOSDiskReadLatencyAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM OS Disk Read Latency Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMOSDiskReadLatencyPolicyEffect": { "type": "string", @@ -918,15 +1370,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMOSDiskReadLatencyAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Read Latency Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } }, "VMOSDiskReadLatencyThreshold": { "type": "string", - "defaultValue": "30" + "defaultValue": "30", + "metadata": { + "displayName": "VM OS Disk Read Latency Threshold", + "description": "Threshold for the alert" + } }, "VMOSDiskReadLatencyOperator": { "type": "string", @@ -937,7 +1401,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Operator", + "description": "Operator for the alert" + } }, "VMOSDiskReadLatencyTimeAggregation": { "type": "string", @@ -948,28 +1416,48 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMOSDiskReadLatencyEvaluationPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Read Latency Evaluation Periods", + "description": "Evaluation Periods for the alert" + } }, "VMOSDiskReadLatencyFailingPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Read Latency Failing Periods", + "description": "Failing Periods for the alert" + } }, "VMOSDiskReadLatencyComputersToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Computers To Include", + "description": "Computers To Include for the alert" + } }, "VMOSDiskReadLatencyDisksToInclude": { "type": "array", "defaultValue": [ "C:", "/" - ] + ], + "metadata": { + "displayName": "VM OS Disk Read Latency Disks To Include", + "description": "Disks To Include for the alert" + } }, "VMOSDiskWriteLatencyAlertSeverity": { "type": "String", @@ -980,7 +1468,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Alert Severity", + "description": "Severity of the alert for VM OS Disk Write Latency" + } }, "VMOSDiskWriteLatencyWindowSize": { "type": "string", @@ -994,7 +1486,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Window Size", + "description": "Window size for the alert" + } }, "VMOSDiskWriteLatencyEvaluationFrequency": { "type": "string", @@ -1005,19 +1501,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMOSDiskWriteLatencyAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Write Latency Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMOSDiskWriteLatencyAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Write Latency Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMOSDiskWriteLatencyAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM OS Disk Write Latency Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMOSDiskWriteLatencyPolicyEffect": { "type": "string", @@ -1025,15 +1537,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMOSDiskWriteLatencyAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Write Latency Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } }, "VMOSDiskWriteLatencyThreshold": { "type": "string", - "defaultValue": "50" + "defaultValue": "50", + "metadata": { + "displayName": "VM OS Disk Write Latency Threshold", + "description": "Threshold for the alert" + } }, "VMOSDiskWriteLatencyOperator": { "type": "string", @@ -1044,7 +1568,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Operator", + "description": "Operator for the alert" + } }, "VMOSDiskWriteLatencyTimeAggregation": { "type": "string", @@ -1055,28 +1583,48 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMOSDiskWriteLatencyEvaluationPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Write Latency Evaluation Periods", + "description": "Evaluation Periods for the alert" + } }, "VMOSDiskWriteLatencyFailingPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Write Latency Failing Periods", + "description": "Failing Periods for the alert" + } }, "VMOSDiskWriteLatencyComputersToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Computers To Include", + "description": "Computers To Include for the alert" + } }, "VMOSDiskWriteLatencyDisksToInclude": { "type": "array", "defaultValue": [ "C:", "/" - ] + ], + "metadata": { + "displayName": "VM OS Disk Write Latency Disks To Include", + "description": "Disks To Include for the alert" + } }, "VMOSDiskSpaceAlertSeverity": { "type": "String", @@ -1087,7 +1635,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM OS Disk Space Alert Severity", + "description": "Severity of the alert for VM OS Disk Space" + } }, "VMOSDiskSpaceWindowSize": { "type": "string", @@ -1101,7 +1653,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM OS Disk Space Window Size", + "description": "Window size for the alert" + } }, "VMOSDiskSpaceEvaluationFrequency": { "type": "string", @@ -1112,19 +1668,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM OS Disk Space Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMOSDiskSpaceAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Space Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMOSDiskSpaceAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Space Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMOSDiskSpaceAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM OS Disk Space Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMOSDiskSpacePolicyEffect": { "type": "string", @@ -1132,15 +1704,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM OS Disk Space Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMOSDiskSpaceAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM OS Disk Space Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } }, "VMOSDiskSpaceThreshold": { "type": "string", - "defaultValue": "10" + "defaultValue": "10", + "metadata": { + "displayName": "VM OS Disk Space Threshold", + "description": "Threshold for the alert" + } }, "VMOSDiskSpaceOperator": { "type": "string", @@ -1151,7 +1735,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM OS Disk Space Operator", + "description": "Operator for the alert" + } }, "VMOSDiskSpaceTimeAggregation": { "type": "string", @@ -1162,28 +1750,48 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM OS Disk Space Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMOSDiskSpaceEvaluationPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Space Evaluation Periods", + "description": "Evaluation Periods for the alert" + } }, "VMOSDiskSpaceFailingPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM OS Disk Space Failing Periods", + "description": "Failing Periods for the alert" + } }, "VMOSDiskSpaceComputersToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM OS Disk Space Computers To Include", + "description": "Computers To Include for the alert" + } }, "VMOSDiskSpaceDisksToInclude": { "type": "array", "defaultValue": [ "C:", "/" - ] + ], + "metadata": { + "displayName": "VM OS Disk Space Disks To Include", + "description": "Disks To Include for the alert" + } }, "VMPercentCPUAlertSeverity": { "type": "String", @@ -1194,7 +1802,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM Percent CPU Alert Severity", + "description": "Severity of the alert for VM Percent CPU" + } }, "VMPercentCPUWindowSize": { "type": "string", @@ -1208,7 +1820,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM Percent CPU Window Size", + "description": "Window size for the alert" + } }, "VMPercentCPUEvaluationFrequency": { "type": "string", @@ -1219,19 +1835,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM Percent CPU Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMPercentCPUAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent CPU Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMPercentCPUAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent CPU Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMPercentCPUAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Percent CPU Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMPercentCPUPolicyEffect": { "type": "string", @@ -1239,15 +1871,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM Percent CPU Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMPercentCPUAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent CPU Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } }, "VMPercentCPUThreshold": { "type": "string", - "defaultValue": "85" + "defaultValue": "85", + "metadata": { + "displayName": "VM Percent CPU Threshold", + "description": "Threshold for the alert" + } }, "VMPercentCPUOperator": { "type": "string", @@ -1258,7 +1902,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM Percent CPU Operator", + "description": "Operator for the alert" + } }, "VMPercentCPUTimeAggregation": { "type": "string", @@ -1269,7 +1917,11 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM Percent CPU Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMPercentMemoryAlertSeverity": { "type": "String", @@ -1280,7 +1932,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM Percent Memory Alert Severity", + "description": "Severity of the alert for VM Percent Memory" + } }, "VMPercentMemoryWindowSize": { "type": "string", @@ -1294,7 +1950,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM Percent Memory Window Size", + "description": "Window size for the alert" + } }, "VMPercentMemoryEvaluationFrequency": { "type": "string", @@ -1305,19 +1965,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM Percent Memory Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMPercentMemoryAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent Memory Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMPercentMemoryAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent Memory Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMPercentMemoryAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Percent Memory Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMPercentMemoryPolicyEffect": { "type": "string", @@ -1325,15 +2001,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM Percent Memory Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMPercentMemoryAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Percent Memory Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } }, "VMPercentMemoryThreshold": { "type": "string", - "defaultValue": "10" + "defaultValue": "10", + "metadata": { + "displayName": "VM Percent Memory Threshold", + "description": "Threshold for the alert" + } }, "VMPercentMemoryOperator": { "type": "string", @@ -1344,7 +2032,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM Percent Memory Operator", + "description": "Operator for the alert" + } }, "VMPercentMemoryTimeAggregation": { "type": "string", @@ -1355,7 +2047,11 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM Percent Memory Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMDataDiskSpaceAlertSeverity": { "type": "String", @@ -1366,7 +2062,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM Data Disk Space Alert Severity", + "description": "Severity of the alert for VM Data Disk Space" + } }, "VMDataDiskSpaceWindowSize": { "type": "string", @@ -1380,7 +2080,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM Data Disk Space Window Size", + "description": "Window size for the alert" + } }, "VMDataDiskSpaceEvaluationFrequency": { "type": "string", @@ -1391,19 +2095,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM Data Disk Space Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMDataDiskSpaceAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Space Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMDataDiskSpaceAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Space Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMDataDiskSpaceAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Data Disk Space Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMDataDiskSpacePolicyEffect": { "type": "string", @@ -1411,15 +2131,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM Data Disk Space Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMDataDiskSpaceAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Space Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } }, "VMDataDiskSpaceThreshold": { "type": "string", - "defaultValue": "10" + "defaultValue": "10", + "metadata": { + "displayName": "VM Data Disk Space Threshold", + "description": "Threshold for the alert" + } }, "VMDataDiskSpaceOperator": { "type": "string", @@ -1430,7 +2162,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM Data Disk Space Operator", + "description": "Operator for the alert" + } }, "VMDataDiskSpaceTimeAggregation": { "type": "string", @@ -1441,21 +2177,37 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM Data Disk Space Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMDataDiskSpaceEvaluationPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Space Evaluation Periods", + "description": "Evaluation Periods for the alert" + } }, "VMDataDiskSpaceFailingPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Space Failing Periods", + "description": "Failing Periods for the alert" + } }, "VMDataDiskSpaceDisksToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM Data Disk Space Disks To Include", + "description": "Disks To Include for the alert" + } }, "VMDataDiskReadLatencyAlertSeverity": { "type": "String", @@ -1466,7 +2218,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Alert Severity", + "description": "Severity of the alert for VM Data Disk Read Latency" + } }, "VMDataDiskReadLatencyWindowSize": { "type": "string", @@ -1480,7 +2236,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Window Size", + "description": "Window size for the alert" + } }, "VMDataDiskReadLatencyEvaluationFrequency": { "type": "string", @@ -1491,19 +2251,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMDataDiskReadLatencyAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Read Latency Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMDataDiskReadLatencyAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Read Latency Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMDataDiskReadLatencyAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Data Disk Read Latency Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMDataDiskReadLatencyPolicyEffect": { "type": "string", @@ -1511,15 +2287,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMDataDiskReadLatencyAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Read Latency Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } }, "VMDataDiskReadLatencyThreshold": { "type": "string", - "defaultValue": "30" + "defaultValue": "30", + "metadata": { + "displayName": "VM Data Disk Read Latency Threshold", + "description": "Threshold for the alert" + } }, "VMDataDiskReadLatencyOperator": { "type": "string", @@ -1530,7 +2318,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Operator", + "description": "Operator for the alert" + } }, "VMDataDiskReadLatencyTimeAggregation": { "type": "string", @@ -1541,27 +2333,47 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMDataDiskReadLatencyEvaluationPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Read Latency Evaluation Periods", + "description": "Evaluation Periods for the alert" + } }, "VMDataDiskReadLatencyFailingPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Read Latency Failing Periods", + "description": "Failing Periods for the alert" + } }, "VMDataDiskReadLatencyComputersToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Computers To Include", + "description": "Computers To Include for the alert" + } }, "VMDataDiskReadLatencyDisksToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM Data Disk Read Latency Disks To Include", + "description": "Disks To Include for the alert" + } }, "VMDataDiskWriteLatencyAlertSeverity": { "type": "String", @@ -1572,7 +2384,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Alert Severity", + "description": "Severity of the alert for VM Data Disk Write Latency" + } }, "VMDataDiskWriteLatencyWindowSize": { "type": "string", @@ -1586,7 +2402,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Window Size", + "description": "Window size for the alert" + } }, "VMDataDiskWriteLatencyEvaluationFrequency": { "type": "string", @@ -1597,19 +2417,35 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "VMDataDiskWriteLatencyAutoMitigate": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Write Latency Auto Mitigate", + "description": "Auto Mitigate for the alert" + } }, "VMDataDiskWriteLatencyAutoResolve": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Write Latency Auto Resolve", + "description": "Auto Resolve for the alert" + } }, "VMDataDiskWriteLatencyAutoResolveTime": { "type": "string", - "defaultValue": "00:10:00" + "defaultValue": "00:10:00", + "metadata": { + "displayName": "VM Data Disk Write Latency Auto Resolve Time", + "description": "Auto Resolve Time for the alert" + } }, "VMDataDiskWriteLatencyPolicyEffect": { "type": "string", @@ -1617,15 +2453,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist" + } }, "VMDataDiskWriteLatencyAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "VM Data Disk Write Latency Alert State", + "description": "Alert state for the alert, true will enable the alert, false will disable the alert" + } }, "VMDataDiskWriteLatencyThreshold": { "type": "string", - "defaultValue": "30" + "defaultValue": "30", + "metadata": { + "displayName": "VM Data Disk Write Latency Threshold", + "description": "Threshold for the alert" + } }, "VMDataDiskWriteLatencyOperator": { "type": "string", @@ -1636,7 +2484,11 @@ "GreaterThanOrEqual", "LessThan", "LessThanOrEqual" - ] + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Operator", + "description": "Operator for the alert" + } }, "VMDataDiskWriteLatencyTimeAggregation": { "type": "string", @@ -1647,49 +2499,705 @@ "Maximum", "Minimum", "Total" - ] + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Time Aggregation", + "description": "Time Aggregation for the alert" + } }, "VMDataDiskWriteLatencyEvaluationPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Write Latency Evaluation Periods", + "description": "Evaluation Periods for the alert" + } }, "VMDataDiskWriteLatencyFailingPeriods": { "type": "string", - "defaultValue": "1" + "defaultValue": "1", + "metadata": { + "displayName": "VM Data Disk Write Latency Failing Periods", + "description": "Failing Periods for the alert" + } }, "VMDataDiskWriteLatencyComputersToInclude": { "type": "array", "defaultValue": [ "*" - ] + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Computers To Include", + "description": "Computers To Include for the alert" + } }, "VMDataDiskWriteLatencyDisksToInclude": { "type": "array", "defaultValue": [ "*" - ] - } - }, - "policyDefinitions": [ - { - "policyDefinitionReferenceId": "ALZ_KVRequest", - "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Requests_Alert')]", - "parameters": { - "severity": { - "value": "[[parameters('KVRequestAlertSeverity')]" - }, - "windowSize": { - "value": "[[parameters('KVRequestWindowSize')]" - }, - "evaluationFrequency": { - "value": "[[parameters('KVRequestEvaluationFrequency')]" - }, - "effect": { - "value": "[[parameters('KVRequestPolicyEffect')]" - }, - "enabled": { - "value": "[[parameters('KVRequestAlertState')]" - } + ], + "metadata": { + "displayName": "VM Data Disk Write Latency Disks To Include", + "description": "Disks To Include for the alert" + } + }, + "AGWApplicationGatewayTotalTimeAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "AGW Total Time Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWApplicationGatewayTotalTimeWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Total Time Window Size", + "description": "Window size for the alert" + } + }, + "AGWApplicationGatewayTotalTimeEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "AGW Total Time Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWApplicationGatewayTotalTimePolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "AGW Total Time Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWApplicationGatewayTotalTimeAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Total Time Alert State", + "description": "Alert state for the alert" + } + }, + "AGWBackendLastByteResponseTimeAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWBackendLastByteResponseTimeWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Window Size", + "description": "Window size for the alert" + } + }, + "AGWBackendLastByteResponseTimeEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWBackendLastByteResponseTimePolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWBackendLastByteResponseTimeAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Backend Last Byte Response Time Alert State", + "description": "Alert state for the alert" + } + }, + "AGWCapacityUnitsAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "AGW Capacity Units Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWCapacityUnitsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Capacity Units Window Size", + "description": "Window size for the alert" + } + }, + "AGWCapacityUnitsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "AGW Capacity Units Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWCapacityUnitsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "AGW Capacity Units Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWCapacityUnitsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Capacity Units Alert State", + "description": "Alert state for the alert" + } + }, + "AGWComputeUnitsAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "AGW Compute Units Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWComputeUnitsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Compute Units Window Size", + "description": "Window size for the alert" + } + }, + "AGWComputeUnitsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "AGW Compute Units Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWComputeUnitsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "AGW Compute Units Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWComputeUnitsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Compute Units Alert State", + "description": "Alert state for the alert" + } + }, + "AGWCPUUtilAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "AGW CPU Util Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWCPUUtilWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW CPU Util Window Size", + "description": "Window size for the alert" + } + }, + "AGWCPUUtilEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "AGW CPU Util Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWCPUUtilPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "AGW CPU Util Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWCPUUtilAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW CPU Util Alert State", + "description": "Alert state for the alert" + } + }, + "AGWFailedRequestsAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "AGW Failed Requests Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWFailedRequestsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Failed Requests Window Size", + "description": "Window size for the alert" + } + }, + "AGWFailedRequestsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "AGW Failed Requests Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWFailedRequestsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "AGW Failed Requests Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWFailedRequestsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Failed Requests Alert State", + "description": "Alert state for the alert" + } + }, + "AGWResponseStatusAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "AGW Response Status Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWResponseStatusWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Response Status Window Size", + "description": "Window size for the alert" + } + }, + "AGWResponseStatusEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "AGW Response Status Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWResponseStatusPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "AGW Response Status Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWResponseStatusAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Response Status Alert State", + "description": "Alert state for the alert" + } + }, + "AGWUnhealthyHostCountAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "AGW Unhealthy Host Count Alert Severity", + "description": "Severity of the alert" + } + }, + "AGWUnhealthyHostCountWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "AGW Unhealthy Host Count Window Size", + "description": "Window size for the alert" + } + }, + "AGWUnhealthyHostCountEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "AGW Unhealthy Host Count Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "AGWUnhealthyHostCountPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "AGW Unhealthy Host Count Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "AGWUnhealthyHostCountAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "AGW Unhealthy Host Count Alert State", + "description": "Alert state for the alert" + } + }, + "LBDatapathAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "LB Data path Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "LBDatapathAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Data path Availability Window Size", + "description": "Window size for the alert" + } + }, + "LBDatapathAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "LB Data path Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBDatapathAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "LB Data path Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBDatapathAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Data path Availability Alert State", + "description": "Alert state for the alert" + } + }, + "LBGlobalBackendAvailabilityAlertSeverity": { + "type": "String", + "defaultValue": "0", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "LB Global Backend Availability Alert Severity", + "description": "Severity of the alert" + } + }, + "LBGlobalBackendAvailabilityWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Global Backend Availability Window Size", + "description": "Window size for the alert" + } + }, + "LBGlobalBackendAvailabilityEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "LB Global Backend Availability Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBGlobalBackendAvailabilityPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "LB Global Backend Availability Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBGlobalBackendAvailabilityAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Global Backend Availability Alert State", + "description": "Alert state for the alert" + } + }, + "LBHealthProbeStatusAlertSeverity": { + "type": "String", + "defaultValue": "2", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "LB Health Probe Status Alert Severity", + "description": "Severity of the alert" + } + }, + "LBHealthProbeStatusWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Health Probe Status Window Size", + "description": "Window size for the alert" + } + }, + "LBHealthProbeStatusEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "LB Health Probe Status Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBHealthProbeStatusPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "LB Health Probe Status Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBHealthProbeStatusAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Health Probe Status Alert State", + "description": "Alert state for the alert" + } + }, + "LBUsedSNATPortsAlertSeverity": { + "type": "String", + "defaultValue": "1", + "allowedValues": ["0", "1", "2", "3", "4"], + "metadata": { + "displayName": "LB Used SNAT Ports Alert Severity", + "description": "Severity of the alert" + } + }, + "LBUsedSNATPortsWindowSize": { + "type": "string", + "defaultValue": "PT5M", + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "metadata": { + "displayName": "LB Used SNAT Ports Window Size", + "description": "Window size for the alert" + } + }, + "LBUsedSNATPortsEvaluationFrequency": { + "type": "string", + "defaultValue": "PT1M", + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "metadata": { + "displayName": "LB Used SNAT Ports Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } + }, + "LBUsedSNATPortsPolicyEffect": { + "type": "string", + "defaultValue": "deployIfNotExists", + "allowedValues": ["deployIfNotExists", "disabled"], + "metadata": { + "displayName": "LB Used SNAT Ports Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will deploy the alert if it does not exist, disabled will not deploy the alert" + } + }, + "LBUsedSNATPortsAlertState": { + "type": "string", + "defaultValue": "true", + "metadata": { + "displayName": "LB Used SNAT Ports Alert State", + "description": "Alert state for the alert" + } + } + }, + "policyDefinitions": [ + { + "policyDefinitionReferenceId": "ALZ_KVRequest", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_KeyVault_Requests_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('KVRequestAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('KVRequestWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('KVRequestEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('KVRequestPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('KVRequestAlertState')]" + } } }, { @@ -2591,6 +4099,258 @@ "value": "[[parameters('ALZMonitorResourceGroupLocation')]" } } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWTotalTime", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_ApplicationGatewayTotalTime_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('AGWApplicationGatewayTotalTimeAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('AGWApplicationGatewayTotalTimeWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('AGWApplicationGatewayTotalTimeEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('AGWApplicationGatewayTotalTimePolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('AGWApplicationGatewayTotalTimeAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWBackendLastByteResponseTime", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_BackendLastByteResponseTime_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('AGWBackendLastByteResponseTimeAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('AGWBackendLastByteResponseTimeWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('AGWBackendLastByteResponseTimeEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('AGWBackendLastByteResponseTimePolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('AGWBackendLastByteResponseTimeAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWCapacityUnits", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_CapacityUnits_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('AGWCapacityUnitsAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('AGWCapacityUnitsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('AGWCapacityUnitsEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('AGWCapacityUnitsPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('AGWCapacityUnitsAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWComputeUnits", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_ComputeUnits_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('AGWComputeUnitsAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('AGWComputeUnitsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('AGWComputeUnitsEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('AGWComputeUnitsPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('AGWComputeUnitsAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWCPUUtilization", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_CPUUtilization_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('AGWCPUUtilAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('AGWCPUUtilWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('AGWCPUUtilEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('AGWCPUUtilPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('AGWCPUUtilAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWFailedRequests", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_FailedRequests_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('AGWFailedRequestsAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('AGWFailedRequestsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('AGWFailedRequestsEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('AGWFailedRequestsPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('AGWFailedRequestsAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWResponseStatus", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_ResponseStatus_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('AGWResponseStatusAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('AGWResponseStatusWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('AGWResponseStatusEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('AGWResponseStatusPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('AGWResponseStatusAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_AGWUnhealthyHostCount", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_AG_UnhealthyHostCount_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('AGWUnhealthyHostCountAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('AGWUnhealthyHostCountWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('AGWUnhealthyHostCountEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('AGWUnhealthyHostCountPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('AGWUnhealthyHostCountAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBDataPathAvailability", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_DataPathAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('LBDataPathAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('LBDataPathAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('LBDataPathAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('LBDataPathAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('LBDataPathAvailabilityAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBGlobalBackendAvailability", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_GlobalBackendAvailability_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('LBGlobalBackendAvailabilityAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('LBGlobalBackendAvailabilityWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('LBGlobalBackendAvailabilityEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('LBGlobalBackendAvailabilityPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('LBGlobalBackendAvailabilityAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBHealthProbeStatus", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_HealthProbeStatus_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('LBHealthProbeStatusAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('LBHealthProbeStatusWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('LBHealthProbeStatusEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('LBHealthProbeStatusPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('LBHealthProbeStatusAlertState')]" + } + } + }, + { + "policyDefinitionReferenceId": "ALZ_LBUsedSNATPorts", + "policyDefinitionId": "[concat('/providers/Microsoft.Management/managementGroups/',managementGroup().name, '/providers/Microsoft.Authorization/policyDefinitions/Deploy_ALB_UsedSNATPorts_Alert')]", + "parameters": { + "severity": { + "value": "[[parameters('LBUsedSNATPortsAlertSeverity')]" + }, + "windowSize": { + "value": "[[parameters('LBUsedSNATPortsWindowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('LBUsedSNATPortsEvaluationFrequency')]" + }, + "effect": { + "value": "[[parameters('LBUsedSNATPortsPolicyEffect')]" + }, + "enabled": { + "value": "[[parameters('LBUsedSNATPortsAlertState')]" + } + } } ], "policyType": "Custom", diff --git a/patterns/alz/policySetDefinitions/Deploy-Management-Alerts.json b/patterns/alz/policySetDefinitions/Deploy-Management-Alerts.json index 907f63606..ea8a3799d 100644 --- a/patterns/alz/policySetDefinitions/Deploy-Management-Alerts.json +++ b/patterns/alz/policySetDefinitions/Deploy-Management-Alerts.json @@ -17,17 +17,29 @@ "parameters": { "ALZMonitorResourceGroupName": { "type": "String", - "defaultValue": "ALZ-Monitoring-RG" + "defaultValue": "ALZ-Monitoring-RG", + "metadata": { + "displayName": "ALZ Monitoring Resource Group Name", + "description": "Name of the resource group to deploy the ALZ monitoring resources to" + } }, "ALZMonitorResourceGroupTags": { "type": "Object", "defaultValue": { - "_deployed_by_amba": true + "_deployed_by_alz_monitor": true + }, + "metadata": { + "displayName": "ALZ Monitoring Resource Group Tags", + "description": "Tags to apply to the resource group" } }, "ALZMonitorResourceGroupLocation": { "type": "String", - "defaultValue": "centralus" + "defaultValue": "centralus", + "metadata": { + "displayName": "ALZ Monitoring Resource Group Location", + "description": "Location of the resource group" + } }, "AATotalJobAlertSeverity": { "type": "String", @@ -38,7 +50,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "AA Total Job Alert Severity", + "description": "Severity of the alert" + } }, "AATotalJobAlertWindowSize": { "type": "string", @@ -52,7 +68,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "AA Total Job Alert Window Size", + "description": "Window size for the alert" + } }, "AATotalJobAlertEvaluationFrequency": { "type": "string", @@ -63,7 +83,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "AA Total Job Alert Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "AATotalJobAlertPolicyEffect": { "type": "string", @@ -71,15 +95,27 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "AA Total Job Alert Policy Effect", + "description": "Policy effect for the alert" + } }, "AATotalJobAlertAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "AA Total Job Alert State", + "description": "Alert state for the alert" + } }, "AATotalJobAlertThreshold": { "type": "string", - "defaultValue": "20" + "defaultValue": "20", + "metadata": { + "displayName": "AA Total Job Alert Threshold", + "description": "Threshold for the alert" + } }, "RVBackupHealthPolicyEffect": { "type": "string", @@ -88,7 +124,11 @@ "modify", "audit", "disabled" - ] + ], + "metadata": { + "displayName": "RV Backup Health Monitor Policy Effect", + "description": "Policy effect for the alert, modify will create the alert if it does not exist and enable it on your Recovery Vaults, audit will only audit if alerting is enabled on Recovery Vaults, disabled will not create the alert on Recovery Vaults" + } }, "StorageAccountAvailabilityAlertSeverity": { "type": "String", @@ -99,7 +139,11 @@ "2", "3", "4" - ] + ], + "metadata": { + "displayName": "Storage Account Availability Alert Severity", + "description": "Severity of the alert" + } }, "StorageAccountAvailabilityWindowSize": { "type": "string", @@ -113,7 +157,11 @@ "PT6H", "PT12H", "P1D" - ] + ], + "metadata": { + "displayName": "Storage Account Availability Alert Window Size", + "description": "Window size for the alert" + } }, "StorageAccountAvailabilityFrequency": { "type": "string", @@ -124,7 +172,11 @@ "PT15M", "PT30M", "PT1H" - ] + ], + "metadata": { + "displayName": "Storage Account Availability Alert Evaluation Frequency", + "description": "Evaluation frequency for the alert" + } }, "StorageAccountAvailabilityPolicyEffect": { "type": "string", @@ -132,23 +184,43 @@ "allowedValues": [ "deployIfNotExists", "disabled" - ] + ], + "metadata": { + "displayName": "Storage Account Availability Alert Policy Effect", + "description": "Policy effect for the alert, deployIfNotExists will create the alert if it does not exist, disabled will not create the alert" + } }, "StorageAccountAvailabilityAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Storage Account Availability Alert State", + "description": "Alert state for the alert" + } }, "StorageAccountAvailabilityThreshold": { "type": "string", - "defaultValue": "90" + "defaultValue": "90", + "metadata": { + "displayName": "Storage Account Availability Alert Threshold", + "description": "Threshold for the alert" + } }, "activityLAWDeleteAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity Log Alert Delete Alert State", + "description": "Alert state for the alert" + } }, "activityLAWKeyRegenAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Activity Log Alert Key Regen Alert State", + "description": "Alert state for the alert" + } } }, "policyDefinitions": [ diff --git a/patterns/alz/policySetDefinitions/Deploy-ServiceHealth-Alerts.json b/patterns/alz/policySetDefinitions/Deploy-ServiceHealth-Alerts.json index b86a3b18d..ac8c5b6d2 100644 --- a/patterns/alz/policySetDefinitions/Deploy-ServiceHealth-Alerts.json +++ b/patterns/alz/policySetDefinitions/Deploy-ServiceHealth-Alerts.json @@ -17,45 +17,85 @@ "parameters": { "ALZMonitorResourceGroupName": { "type": "String", - "defaultValue": "ALZ-Monitoring-RG" + "defaultValue": "ALZ-Monitoring-RG", + "metadata": { + "displayName": "Resource Group Name", + "description": "Name of the resource group to deploy the alerts to" + } }, "ALZMonitorResourceGroupTags": { "type": "Object", "defaultValue": { - "_deployed_by_amba": true + "_deployed_by_alz_monitor": true + }, + "metadata": { + "displayName": "Resource Group Tags", + "description": "Tags to apply to the resource group" } }, "ALZMonitorResourceGroupLocation": { "type": "String", - "defaultValue": "centralus" + "defaultValue": "centralus", + "metadata": { + "displayName": "Resource Group Location", + "description": "Location of the resource group" + } }, "ResHlthUnhealthyAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Resource Health Unhealthy Alert State", + "description": "State of the Resource Health Unhealthy alert" + } }, "SvcHlthAdvisoryAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Service Health Advisory Alert State", + "description": "State of the Service Health Advisory alert" + } }, "SvcHlthIncidentAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Service Health Incident Alert State", + "description": "State of the Service Health Incident alert" + } }, "SvcHlthMaintenanceAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Service Health Maintenance Alert State", + "description": "State of the Service Health Maintenance alert" + } }, "svcHlthSecAdvisoryAlertState": { "type": "string", - "defaultValue": "true" + "defaultValue": "true", + "metadata": { + "displayName": "Service Health Security Advisory Alert State", + "description": "State of the Service Health Security Advisory alert" + } }, "ALZMonitorActionGroupEmail": { "type": "string", - "defaultValue": "action@mail.com" + "defaultValue": "action@mail.com", + "metadata": { + "displayName": "Action Group Email", + "description": "Email address to send alerts to" + } }, "MonitorDisable": { "type": "string", - "defaultValue": "MonitorDisable" + "defaultValue": "MonitorDisable", + "metadata": { + "displayName": "Monitor Disable", + "description": "Disable the Monitor" + } } }, "policyDefinitions": [ diff --git a/patterns/alz/scripts/Start-AMBACleanup.ps1 b/patterns/alz/scripts/Start-AMBACleanup.ps1 index 3c7040c6a..efdbbd5f8 100644 --- a/patterns/alz/scripts/Start-AMBACleanup.ps1 +++ b/patterns/alz/scripts/Start-AMBACleanup.ps1 @@ -12,7 +12,7 @@ This script leverages the Azure Resource Graph to find object to delete. Note that the Resource Graph lags behind ARM by a couple minutes. .LINK - https://github.com/Azure/alz-monitor + https://github.com/Azure/azure-monitor-baseline-alerts .EXAMPLE ./Start-AMBACleanup.ps1 -ReportOnly @@ -180,7 +180,7 @@ If (!$reportOnly.IsPresent) { # delete policy assignment role assignments Write-Host "Deleting role assignments..." - $roleAssignments | ForEach-Object { $_ | Remove-AzRoleAssignment -Force:$force -Confirm:(!$force) | Out-Null } + $roleAssignments | ForEach-Object { $_ | Remove-AzRoleAssignment -Confirm:(!$force) | Out-Null } } Else { diff --git a/patterns/alz/scripts/Start-AMBARemediation.ps1 b/patterns/alz/scripts/Start-AMBARemediation.ps1 index f037b3293..79f398265 100644 --- a/patterns/alz/scripts/Start-AMBARemediation.ps1 +++ b/patterns/alz/scripts/Start-AMBARemediation.ps1 @@ -5,17 +5,17 @@ Depending on the result the script will either enumerate the policy set and trig Examples: #Modify the following variables to match your environment - $managementGroupID = "The pseudo root management group id parenting the identity, management and connectivity management groups" + $pseudoRootManagementGroup = "The pseudo root management group id parenting the identity, management and connectivity management groups" $identityManagementGroup = "The management group id for Identity" $managementManagementGroup = "The management group id for Management" $connectivityManagementGroup = "The management group id for Connectivity" $LZManagementGroup="The management group id for Landing Zones" #Run the following commands to initiate remediation - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $managementManagementGroup -policyName Alerting-Management - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $connectivityManagementGroup -policyName Alerting-Connectivity - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $identityManagementGroup -policyName Alerting-Identity - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $LZManagementGroup -policyName Alerting-LandingZone - .src\scripts\Start-AMBARemediation.ps1 -managementGroupName $managementGroupId -policyName Alerting-ServiceHealth + .\patterns\alz\scriptsStart-AMBARemediation.ps1 -managementGroupName $managementManagementGroup -policyName Alerting-Management + .\patterns\alz\scriptsStart-AMBARemediation.ps1 -managementGroupName $connectivityManagementGroup -policyName Alerting-Connectivity + .\patterns\alz\scriptsStart-AMBARemediation.ps1 -managementGroupName $identityManagementGroup -policyName Alerting-Identity + .\patterns\alz\scriptsStart-AMBARemediation.ps1 -managementGroupName $LZManagementGroup -policyName Alerting-LandingZone + .\patterns\alz\scriptsStart-AMBARemediation.ps1 -managementGroupName $pseudoRootManagementGroup -policyName Alerting-ServiceHealth #> Param( diff --git a/patterns/alz/templates/policies.bicep b/patterns/alz/templates/policies.bicep index 2dc7011c6..c19f26df7 100644 --- a/patterns/alz/templates/policies.bicep +++ b/patterns/alz/templates/policies.bicep @@ -68,74 +68,93 @@ var deploymentLocation = '"location": "${targetDeploymentLocationByCloudType[clo // We use loadTextContent instead of loadJsonContent as this allows us to perform string replacement operations against the imported templates. var loadPolicyDefinitions = { All: [ - loadTextContent('../../../resources/Automation/automationAccounts/Deploy-AA-TotalJob-Alert.json') - loadTextContent('../../../resources/Network/azureFirewalls/Deploy-ActivityLog-AzureFirewall-Del.json') - loadTextContent('../../../resources/KeyVault/vaults/Deploy-ActivityLog-KeyVault-Del.json') - loadTextContent('../../../resources/OperationalInsights/workspaces/Deploy-ActivityLog-LAWorkspace-Del.json') - loadTextContent('../../../resources/OperationalInsights/workspaces/Deploy-ActivityLog-LAWorkspace-KeyRegen.json') - loadTextContent('../../../resources/Network/networkSecurityGroups/Deploy-ActivityLog-NSG-Del.json') - loadTextContent('../../../resources//Resources/subscriptions/Deploy-ActivityLog-ResourceHealth-UnHealthly-Alert.json') - loadTextContent('../../../resources/Network/routeTables/Deploy-ActivityLog-RouteTable-Update.json') - loadTextContent('../../../resources/Resources/subscriptions/Deploy-ActivityLog-ServiceHealth-Health.json') - loadTextContent('../../../resources/Resources/subscriptions/Deploy-ActivityLog-ServiceHealth-Incident.json') - loadTextContent('../../../resources/Resources/subscriptions/Deploy-ActivityLog-ServiceHealth-Maintenance.json') - loadTextContent('../../../resources/Resources/subscriptions/Deploy-ActivityLog-ServiceHealth-Security.json') - loadTextContent('../../../resources/Network/vpnGateways/Deploy-ActivityLog-VPNG-Del.json') - loadTextContent('../../../resources/Network/azureFirewalls/Deploy-AFW-FirewallHealth-Alert.json') - loadTextContent('../../../resources/Network/azureFirewalls/Deploy-AFW-SNATPortUtilization-Alert.json') - loadTextContent('../../../resources/AlertsManagement/actionRules/Deploy-AlertProcessingRule-Deploy.json') - loadTextContent('../../../resources/Network/expressRouteCircuits/Deploy-ERCIR-ARPAvailability-Alert.json') - loadTextContent('../../../resources/Network/expressRouteCircuits/Deploy-ERCIR-BGPAvailability-Alert.json') - loadTextContent('../../../resources/Network/expressRouteCircuits/Deploy-ERCIR-QOSDropsBitsIn-Alert.json') - loadTextContent('../../../resources/Network/expressRouteCircuits/Deploy-ERCIR-QOSDropsBitsOut-Alert.json') - loadTextContent('../../../resources/Network/expressRouteGateways/Deploy-ERG-BitsInPerSecond-Alert.json') - loadTextContent('../../../resources/Network/expressRouteGateways/Deploy-ERG-BitsOutPerSecond-Alert.json') - loadTextContent('../../../resources/Network/expressRouteGateways/Deploy-ERG-CPUUtilization-Alert.json') - loadTextContent('../../../resources/KeyVault/vaults/Deploy-KV-Availability-Alert.json') - loadTextContent('../../../resources/KeyVault/vaults/Deploy-KV-Capacity-Alert.json') - loadTextContent('../../../resources/KeyVault/vaults/Deploy-KV-Latency-Alert.json') - loadTextContent('../../../resources/KeyVault/vaults/Deploy-KV-Requests-Alert.json') - loadTextContent('../../../resources/Network/privateDnsZones/Deploy-PDNSZ-CapacityUtilization-Alert.json') - loadTextContent('../../../resources/Network/privateDnsZones/Deploy-PDNSZ-QueryVolume-Alert.json') - loadTextContent('../../../resources/Network/privateDnsZones/Deploy-PDNSZ-RecordSetCapacity-Alert.json') - loadTextContent('../../../resources/Network/privateDnsZones/Deploy-PDNSZ-RegistrationCapacityUtilization-Alert.json') - loadTextContent('../../../resources/Network/publicIPAddresses/Deploy-PIP-BytesInDDOSAttack-Alert.json') - loadTextContent('../../../resources/Network/publicIPAddresses/Deploy-PIP-DDOSAttack-Alert.json') - loadTextContent('../../../resources/Network/publicIPAddresses/Deploy-PIP-PacketsInDDOS-Alert.json') - loadTextContent('../../../resources/Network/publicIPAddresses/Deploy-PIP-VIPAvailability-Alert.json') - loadTextContent('../../../resources/storage/storageAccounts/Deploy-SA-Availability-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-AvailableMemory-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-DataDiskReadLatency-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-DataDiskSpace-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-DataDiskWriteLatency-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-HeartBeat-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-HeartBeatAlertRG.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-NetworkIn-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-NetworkOut-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-OSDiskReadLatency-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-OSDiskSpace-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-OSDiskWriteLatency-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-PercentCPU-Alert.json') - loadTextContent('../../../resources/Compute/virtualMachines/Deploy-VM-PercentMemory-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworks/Deploy-VNET-DDOSAttack-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworkGateways/Deploy-VNETG-BandwidthUtilization-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworkGateways/Deploy-VNETG-Egress-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworkGateways/Deploy-VNETG-EgressPacketDropCount-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworkGateways/Deploy-VNETG-EgressPacketDropMismatch-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworkGateways/Deploy-VNETG-ERGBitsPerSecond-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworkGateways/Deploy-VNETG-ERGCPUUtilization-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworkGateways/Deploy-VNETG-Ingress-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworkGateways/Deploy-VNETG-IngressPacketDropCount-Alert.json') - loadTextContent('../../../resources/Network/virtualNetworkGateways/Deploy-VNETG-IngressPacketDropMismatch-Alert.json') - loadTextContent('../../../resources/Network/vpnGateways/Deploy-VPNG-BandwidthUtilization-Alert.json') - loadTextContent('../../../resources/Network/vpnGateways/Deploy-VPNG-BGPPeerStatus-Alert.json') - loadTextContent('../../../resources/Network/vpnGateways/Deploy-VPNG-Egress-Alert.json') - loadTextContent('../../../resources/Network/vpnGateways/Deploy-VPNG-EgressPacketDropCount-Alert.json') - loadTextContent('../../../resources/Network/vpnGateways/Deploy-VPNG-EgressPacketDropMismatch-Alert.json') - loadTextContent('../../../resources/Network/vpnGateways/Deploy-VPNG-Ingress-Alert.json') - loadTextContent('../../../resources/Network/vpnGateways/Deploy-VPNG-IngressPacketDropCount-Alert.json') - loadTextContent('../../../resources/Network/vpnGateways/Deploy-VPNG-IngressPacketDropMismatch-Alert.json') - loadTextContent('../../../resources/RecoveryServices/vaults/Modify-RSV-BackupHealth-Alert.json') + loadTextContent('../../../services/Automation/automationAccounts/Deploy-AA-TotalJob-Alert.json') + loadTextContent('../../../services/Network/azureFirewalls/Deploy-ActivityLog-AzureFirewall-Del.json') + loadTextContent('../../../services/KeyVault/vaults/Deploy-ActivityLog-KeyVault-Del.json') + loadTextContent('../../../services/OperationalInsights/workspaces/Deploy-ActivityLog-LAWorkspace-Del.json') + loadTextContent('../../../services/OperationalInsights/workspaces/Deploy-ActivityLog-LAWorkspace-KeyRegen.json') + loadTextContent('../../../services/Network/networkSecurityGroups/Deploy-ActivityLog-NSG-Del.json') + loadTextContent('../../../services//Resources/subscriptions/Deploy-ActivityLog-ResourceHealth-UnHealthly-Alert.json') + loadTextContent('../../../services/Network/routeTables/Deploy-ActivityLog-RouteTable-Update.json') + loadTextContent('../../../services/Resources/subscriptions/Deploy-ActivityLog-ServiceHealth-Health.json') + loadTextContent('../../../services/Resources/subscriptions/Deploy-ActivityLog-ServiceHealth-Incident.json') + loadTextContent('../../../services/Resources/subscriptions/Deploy-ActivityLog-ServiceHealth-Maintenance.json') + loadTextContent('../../../services/Resources/subscriptions/Deploy-ActivityLog-ServiceHealth-Security.json') + loadTextContent('../../../services/Network/vpnGateways/Deploy-ActivityLog-VPNG-Del.json') + loadTextContent('../../../services/Network/azureFirewalls/Deploy-AFW-FirewallHealth-Alert.json') + loadTextContent('../../../services/Network/azureFirewalls/Deploy-AFW-SNATPortUtilization-Alert.json') + loadTextContent('../../../services/AlertsManagement/actionRules/Deploy-AlertProcessingRule-Deploy.json') + loadTextContent('../../../services/Network/expressRouteCircuits/Deploy-ERCIR-ARPAvailability-Alert.json') + loadTextContent('../../../services/Network/expressRouteCircuits/Deploy-ERCIR-BGPAvailability-Alert.json') + loadTextContent('../../../services/Network/expressRouteCircuits/Deploy-ERCIR-QOSDropsBitsIn-Alert.json') + loadTextContent('../../../services/Network/expressRouteCircuits/Deploy-ERCIR-QOSDropsBitsOut-Alert.json') + loadTextContent('../../../services/Network/expressRouteGateways/Deploy-ERG-BitsInPerSecond-Alert.json') + loadTextContent('../../../services/Network/expressRouteGateways/Deploy-ERG-BitsOutPerSecond-Alert.json') + loadTextContent('../../../services/Network/expressRouteGateways/Deploy-ERG-CPUUtilization-Alert.json') + loadTextContent('../../../services/KeyVault/vaults/Deploy-KV-Availability-Alert.json') + loadTextContent('../../../services/KeyVault/vaults/Deploy-KV-Capacity-Alert.json') + loadTextContent('../../../services/KeyVault/vaults/Deploy-KV-Latency-Alert.json') + loadTextContent('../../../services/KeyVault/vaults/Deploy-KV-Requests-Alert.json') + loadTextContent('../../../services/Network/privateDnsZones/Deploy-PDNSZ-CapacityUtilization-Alert.json') + loadTextContent('../../../services/Network/privateDnsZones/Deploy-PDNSZ-QueryVolume-Alert.json') + loadTextContent('../../../services/Network/privateDnsZones/Deploy-PDNSZ-RecordSetCapacity-Alert.json') + loadTextContent('../../../services/Network/privateDnsZones/Deploy-PDNSZ-RegistrationCapacityUtilization-Alert.json') + loadTextContent('../../../services/Network/publicIPAddresses/Deploy-PIP-BytesInDDOSAttack-Alert.json') + loadTextContent('../../../services/Network/publicIPAddresses/Deploy-PIP-DDOSAttack-Alert.json') + loadTextContent('../../../services/Network/publicIPAddresses/Deploy-PIP-PacketsInDDOS-Alert.json') + loadTextContent('../../../services/Network/publicIPAddresses/Deploy-PIP-VIPAvailability-Alert.json') + loadTextContent('../../../services/storage/storageAccounts/Deploy-SA-Availability-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-AvailableMemory-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-DataDiskReadLatency-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-DataDiskSpace-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-DataDiskWriteLatency-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-HeartBeat-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-HeartBeatAlertRG.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-NetworkIn-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-NetworkOut-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-OSDiskReadLatency-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-OSDiskSpace-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-OSDiskWriteLatency-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-PercentCPU-Alert.json') + loadTextContent('../../../services/Compute/virtualMachines/Deploy-VM-PercentMemory-Alert.json') + loadTextContent('../../../services/Network/virtualNetworks/Deploy-VNET-DDOSAttack-Alert.json') + loadTextContent('../../../services/Network/virtualNetworkGateways/Deploy-VNETG-BandwidthUtilization-Alert.json') + loadTextContent('../../../services/Network/virtualNetworkGateways/Deploy-VNETG-Egress-Alert.json') + loadTextContent('../../../services/Network/virtualNetworkGateways/Deploy-VNETG-EgressPacketDropCount-Alert.json') + loadTextContent('../../../services/Network/virtualNetworkGateways/Deploy-VNETG-EgressPacketDropMismatch-Alert.json') + loadTextContent('../../../services/Network/virtualNetworkGateways/Deploy-VNETG-ERGBitsPerSecond-Alert.json') + loadTextContent('../../../services/Network/virtualNetworkGateways/Deploy-VNETG-ERGCPUUtilization-Alert.json') + loadTextContent('../../../services/Network/virtualNetworkGateways/Deploy-VNETG-Ingress-Alert.json') + loadTextContent('../../../services/Network/virtualNetworkGateways/Deploy-VNETG-IngressPacketDropCount-Alert.json') + loadTextContent('../../../services/Network/virtualNetworkGateways/Deploy-VNETG-IngressPacketDropMismatch-Alert.json') + loadTextContent('../../../services/Network/vpnGateways/Deploy-VPNG-BandwidthUtilization-Alert.json') + loadTextContent('../../../services/Network/vpnGateways/Deploy-VPNG-BGPPeerStatus-Alert.json') + loadTextContent('../../../services/Network/vpnGateways/Deploy-VPNG-Egress-Alert.json') + loadTextContent('../../../services/Network/vpnGateways/Deploy-VPNG-EgressPacketDropCount-Alert.json') + loadTextContent('../../../services/Network/vpnGateways/Deploy-VPNG-EgressPacketDropMismatch-Alert.json') + loadTextContent('../../../services/Network/vpnGateways/Deploy-VPNG-Ingress-Alert.json') + loadTextContent('../../../services/Network/vpnGateways/Deploy-VPNG-IngressPacketDropCount-Alert.json') + loadTextContent('../../../services/Network/vpnGateways/Deploy-VPNG-IngressPacketDropMismatch-Alert.json') + loadTextContent('../../../services/RecoveryServices/vaults/Modify-RSV-BackupHealth-Alert.json') + loadTextContent('../../../services/Network/applicationGateways/Deploy-AGW-ApplicationGatewayTotalTime-Alert.json') + loadTextContent('../../../services/Network/applicationGateways/Deploy-AGW-BackendLastByteResponseTime-Alert.json') + loadTextContent('../../../services/Network/applicationGateways/Deploy-AGW-CapacityUnits-Alert.json') + loadTextContent('../../../services/Network/applicationGateways/Deploy-AGW-ComputeUnits-Alert.json') + loadTextContent('../../../services/Network/applicationGateways/Deploy-AGW-CPUUtil-Alert.json') + loadTextContent('../../../services/Network/applicationGateways/Deploy-AGW-FailedRequests-Alert.json') + loadTextContent('../../../services/Network/applicationGateways/Deploy-AGW-ResponseStatus-Alert.json') + loadTextContent('../../../services/Network/applicationGateways/Deploy-AGW-UnhealthyHostCount-Alert.json') + loadTextContent('../../../services/Network/expressRoutePorts/Deploy-ERP-BitsInPerSecond-Alert.json') + loadTextContent('../../../services/Network/expressRoutePorts/Deploy-ERP-BitsOutPerSecond-Alert.json') + loadTextContent('../../../services/Network/expressRoutePorts/Deploy-ERP-LineProtocol-Alert.json') + loadTextContent('../../../services/Network/expressRoutePorts/Deploy-ERP-RxLightLevelHigh-Alert.json') + loadTextContent('../../../services/Network/expressRoutePorts/Deploy-ERP-RxLightLevelLow-Alert.json') + loadTextContent('../../../services/Network/expressRoutePorts/Deploy-ERP-TxLightLevelHigh-Alert.json') + loadTextContent('../../../services/Network/expressRoutePorts/Deploy-ERP-TxLightLevelLow-Alert.json') + loadTextContent('../../../services/Network/loadBalancers/Deploy-LB-DatapathAvailability-Alert.json') + loadTextContent('../../../services/Network/loadBalancers/Deploy-LB-GlobalBackendAvailability-Alert.json') + loadTextContent('../../../services/Network/loadBalancers/Deploy-LB-HealthProbeStatus-Alert.json') + loadTextContent('../../../services/Network/loadBalancers/Deploy-LB-UsedSNATPorts-Alert.json') ] AzureCloud: [] AzureChinaCloud: [] @@ -144,12 +163,13 @@ var loadPolicyDefinitions = { // The following var contains lists of files containing Policy Set Definition (Initiative) resources to load, grouped by compatibility with Cloud. // To get a full list of Azure clouds, use the az cli command "az cloud list --output table" -// We use loadTextContent instead of loadJsonContent as this allows us to perform string replacement operations against the imported templates. +// We use loadTextContent instead of loadJsonContent as this allows us to perform string replacement operations against the imported templates. +// Use string(loadJsonContent('../file.json')) when the JSON has more than 131072 characters var loadPolicySetDefinitions = { All: [ - loadTextContent('../policySetDefinitions/Deploy-Connectivity-Alerts.json') + string(loadJsonContent('../policySetDefinitions/Deploy-Connectivity-Alerts.json')) loadTextContent('../policySetDefinitions/Deploy-Identity-Alerts.json') - loadTextContent('../policySetDefinitions/Deploy-LandingZone-Alerts.json') + string(loadJsonContent('../policySetDefinitions/Deploy-LandingZone-Alerts.json')) loadTextContent('../policySetDefinitions/Deploy-Management-Alerts.json') loadTextContent('../policySetDefinitions/Deploy-ServiceHealth-Alerts.json') ] diff --git a/services/Network/applicationGateways/Deploy-AGW-ApplicationGatewayTotalTime-Alert.json b/services/Network/applicationGateways/Deploy-AGW-ApplicationGatewayTotalTime-Alert.json new file mode 100644 index 000000000..f813e4476 --- /dev/null +++ b/services/Network/applicationGateways/Deploy-AGW-ApplicationGatewayTotalTime-Alert.json @@ -0,0 +1,274 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_AG_ApplicationGatewayTotalTime_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy AGW ApplicationGatewayTotalTime Alert", + "description": "Policy to audit/deploy Azure Application Gateway ApplicationGatewayTotalTime Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "2" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "alertSensitivity": { + "type": "String", + "metadata": { + "displayName": "Alert Sensitivity", + "description": "Alert Sensitivity for the alert" + }, + "allowedValues": ["Low", "Medium", "High"], + "defaultValue": "Medium" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Network/applicationgateways/sku.name", + "In": ["Standard_v2", "WAF_v2"] + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "ApplicationGatewayTotalTime" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "alertSensitivity": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-agApplicationGatewayTotalTime')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for App Gateway ApplicationGatewayTotalTime", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "ApplicationGatewayTotalTime", + "metricNamespace": "Microsoft.Network/applicationgateways", + "metricName": "ApplicationGatewayTotalTime", + "operator": "GreaterThan", + "alertSensitivity": "[[parameters('alertSensitivity')]", + "failingPeriods": { + "minFailingPeriodsToAlert": 2, + "numberOfEvaluationPeriods": 2 + }, + "timeAggregation": "Total", + "criterionType": "DynamicThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "alertSensitivity": { + "value": "[[parameters('alertSensitivity')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "alertSensitivity": { + "value": "[[parameters('alertSensitivity')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/applicationGateways/Deploy-AGW-BackendLastByteResponseTime-Alert.json b/services/Network/applicationGateways/Deploy-AGW-BackendLastByteResponseTime-Alert.json new file mode 100644 index 000000000..01a3ae3c0 --- /dev/null +++ b/services/Network/applicationGateways/Deploy-AGW-BackendLastByteResponseTime-Alert.json @@ -0,0 +1,274 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_AG_BackendLastByteResponseTime_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy AGW BackendLastByteResponseTime Alert", + "description": "Policy to audit/deploy Azure Application Gateway BackendLastByteResponseTime Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "2" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "alertSensitivity": { + "type": "String", + "metadata": { + "displayName": "Alert Sensitivity", + "description": "Alert Sensitivity for the alert" + }, + "allowedValues": ["Low", "Medium", "High"], + "defaultValue": "Medium" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Network/applicationgateways/sku.name", + "In": ["Standard_v2", "WAF_v2"] + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "BackendLastByteResponseTime" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "alertSensitivity": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-agBackendLastByteResponseTime')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for App Gateway BackendLastByteResponseTime", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "BackendLastByteResponseTime", + "metricNamespace": "Microsoft.Network/applicationgateways", + "metricName": "BackendLastByteResponseTime", + "operator": "GreaterThan", + "alertSensitivity": "[[parameters('alertSensitivity')]", + "failingPeriods": { + "minFailingPeriodsToAlert": 2, + "numberOfEvaluationPeriods": 2 + }, + "timeAggregation": "Total", + "criterionType": "DynamicThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "alertSensitivity": { + "value": "[[parameters('alertSensitivity')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "alertSensitivity": { + "value": "[[parameters('alertSensitivity')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/applicationGateways/Deploy-AGW-CPUUtil-Alert.json b/services/Network/applicationGateways/Deploy-AGW-CPUUtil-Alert.json new file mode 100644 index 000000000..e9f4bea00 --- /dev/null +++ b/services/Network/applicationGateways/Deploy-AGW-CPUUtil-Alert.json @@ -0,0 +1,269 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_AG_CPUUtilization_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy AGW CPU Utilization Alert", + "description": "Policy to audit/deploy Azure Application Gateway CPU Utilization Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "2" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "80" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Network/applicationgateways/sku.name", + "notIn": ["Standard_v2", "WAF_v2"] + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "CpuUtilization" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-agCpuUtilization')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for App Gateway CPU Utilization", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "CpuUtilization", + "metricNamespace": "Microsoft.Network/applicationgateways", + "metricName": "CpuUtilization", + "operator": "GreaterThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/applicationGateways/Deploy-AGW-CapacityUnits-Alert.json b/services/Network/applicationGateways/Deploy-AGW-CapacityUnits-Alert.json new file mode 100644 index 000000000..e8c68021f --- /dev/null +++ b/services/Network/applicationGateways/Deploy-AGW-CapacityUnits-Alert.json @@ -0,0 +1,269 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_AG_CapacityUnits_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy AGW Capacity Units Alert", + "description": "Policy to audit/deploy Azure Application Gateway CapacityUnits Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "2" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "75" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Network/applicationgateways/sku.name", + "In": ["Standard_v2", "WAF_v2"] + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "CapacityUnits" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-agCapacityUnits')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for App Gateway Capacity Units", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "CapacityUnits", + "metricNamespace": "Microsoft.Network/applicationgateways", + "metricName": "CapacityUnits", + "operator": "GreaterThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/applicationGateways/Deploy-AGW-ComputeUnits-Alert.json b/services/Network/applicationGateways/Deploy-AGW-ComputeUnits-Alert.json new file mode 100644 index 000000000..43b4deefc --- /dev/null +++ b/services/Network/applicationGateways/Deploy-AGW-ComputeUnits-Alert.json @@ -0,0 +1,269 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_AG_ComputeUnits_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy AGW Compute Units Alert", + "description": "Policy to audit/deploy Azure Application Gateway ComputeUnits Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "2" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "75" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Network/applicationgateways/sku.name", + "In": ["Standard_v2", "WAF_v2"] + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "ComputeUnits" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/Microsoft.Network/applicationgateways/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-agComputeUnits')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for App Gateway Compute Units", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "ComputeUnits", + "metricNamespace": "Microsoft.Network/applicationgateways", + "metricName": "ComputeUnits", + "operator": "GreaterThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/applicationGateways/Deploy-AGW-FailedRequests-Alert.json b/services/Network/applicationGateways/Deploy-AGW-FailedRequests-Alert.json new file mode 100644 index 000000000..41b07f40f --- /dev/null +++ b/services/Network/applicationGateways/Deploy-AGW-FailedRequests-Alert.json @@ -0,0 +1,252 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_AG_FailedRequests_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy AGW FailedRequests Alert", + "description": "Policy to audit/deploy Azure Application Gateway FailedRequests Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "2" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "FailedRequests" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-agFailedRequests')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for App Gateway FailedRequests", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "FailedRequests", + "metricNamespace": "Microsoft.Network/applicationgateways", + "metricName": "FailedRequests", + "operator": "GreaterThan", + "alertSensitivity": "Medium", + "failingPeriods": { + "minFailingPeriodsToAlert": 2, + "numberOfEvaluationPeriods": 2 + }, + "timeAggregation": "Total", + "criterionType": "DynamicThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/applicationGateways/Deploy-AGW-ResponseStatus-Alert.json b/services/Network/applicationGateways/Deploy-AGW-ResponseStatus-Alert.json new file mode 100644 index 000000000..b443e2005 --- /dev/null +++ b/services/Network/applicationGateways/Deploy-AGW-ResponseStatus-Alert.json @@ -0,0 +1,277 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_AG_ResponseStatus_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy AGW ResponseStatus Alert", + "description": "Policy to audit/deploy Azure Application Gateway ResponseStatus Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "2" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "alertSensitivity": { + "type": "String", + "metadata": { + "displayName": "Alert Sensitivity", + "description": "Alert Sensitivity for the alert" + }, + "allowedValues": ["Low", "Medium", "High"], + "defaultValue": "Medium" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "ResponseStatus" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/applicationgateways/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "alertSensitivity": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-agResponseStatus')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for App Gateway ResponseStatus", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "ResponseStatus", + "metricNamespace": "Microsoft.Network/applicationgateways", + "metricName": "ResponseStatus", + "operator": "GreaterThan", + "alertSensitivity": "[[parameters('alertSensitivity')]", + "failingPeriods": { + "minFailingPeriodsToAlert": 2, + "numberOfEvaluationPeriods": 2 + }, + "timeAggregation": "Total", + "dimensions": [ + { + "name": "HttpStatusGroup", + "operator": "Include", + "values": ["4xx", "5xx"] + } + ], + "criterionType": "DynamicThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "alertSensitivity": { + "value": "[[parameters('alertSensitivity')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "alertSensitivity": { + "value": "[[parameters('alertSensitivity')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/applicationGateways/Deploy-AGW-UnhealthyHostCount-Alert.json b/services/Network/applicationGateways/Deploy-AGW-UnhealthyHostCount-Alert.json new file mode 100644 index 000000000..0610a57e6 --- /dev/null +++ b/services/Network/applicationGateways/Deploy-AGW-UnhealthyHostCount-Alert.json @@ -0,0 +1,265 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_AG_UnhealthyHostCount_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy AGW Unhealthy Host Count Alert", + "description": "Policy to audit/deploy Azure Application Gateway Unhealthy Host Count Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "2" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "20" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/applicationgateways" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "UnhealthyHostCount" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-agUnhealthyHostCount')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for App Gateway Unhealthy Host Count", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "CpuUtilization", + "metricNamespace": "Microsoft.Network/applicationgateways", + "metricName": "UnhealthyHostCount", + "operator": "GreaterThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/expressRoutePorts/Deploy-ERP-BitsInPerSecond-Alert.json b/services/Network/expressRoutePorts/Deploy-ERP-BitsInPerSecond-Alert.json new file mode 100644 index 000000000..25b9548c2 --- /dev/null +++ b/services/Network/expressRoutePorts/Deploy-ERP-BitsInPerSecond-Alert.json @@ -0,0 +1,265 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ERP_ExpressRouteBitsIn_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ER Direct ExpressRoute Bits In Alert", + "description": "Policy to audit/deploy ER Direct Connection BitsInPerSecond Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "0" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT5M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "1" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "disabled" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "PortBitsInPerSecond" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-DirectERBitsInAlert')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ER Direct Connection BitsInPerSecond", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "PortBitsInPerSecond", + "metricNamespace": "Microsoft.Network/expressRoutePorts", + "metricName": "PortBitsInPerSecond", + "operator": "LessThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/expressRoutePorts/Deploy-ERP-BitsOutPerSecond-Alert.json b/services/Network/expressRoutePorts/Deploy-ERP-BitsOutPerSecond-Alert.json new file mode 100644 index 000000000..de6e4c914 --- /dev/null +++ b/services/Network/expressRoutePorts/Deploy-ERP-BitsOutPerSecond-Alert.json @@ -0,0 +1,265 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ERP_ExpressRouteBitsOut_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ER Direct ExpressRoute Bits Out Alert", + "description": "Policy to audit/deploy ER Direct Connection BitsOutPerSecond Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "0" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT5M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "1" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "disabled" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "PortBitsOutPerSecond" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-DirectERBitsOutAlert')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ER Direct Connection BitsOutPerSecond", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "PortBitsOutPerSecond", + "metricNamespace": "Microsoft.Network/expressRoutePorts", + "metricName": "PortBitsOutPerSecond", + "operator": "LessThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/expressRoutePorts/Deploy-ERP-LineProtocol-Alert.json b/services/Network/expressRoutePorts/Deploy-ERP-LineProtocol-Alert.json new file mode 100644 index 000000000..f3ca4c0e8 --- /dev/null +++ b/services/Network/expressRoutePorts/Deploy-ERP-LineProtocol-Alert.json @@ -0,0 +1,265 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ERP_ExpressRoutLineProtocol_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ER Direct ExpressRoute LineProtocol Alert", + "description": "Policy to audit/deploy ER Direct LineProtocol Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "0" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT5M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "0.9" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "disabled" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "LineProtocol" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-DirectERLineProtocolAlert')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ER Direct Connection LineProtocolPerSecond", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "LineProtocol", + "metricNamespace": "Microsoft.Network/expressRoutePorts", + "metricName": "LineProtocol", + "operator": "LessThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/expressRoutePorts/Deploy-ERP-RxLightLevelHigh-Alert.json b/services/Network/expressRoutePorts/Deploy-ERP-RxLightLevelHigh-Alert.json new file mode 100644 index 000000000..aadfd0ffd --- /dev/null +++ b/services/Network/expressRoutePorts/Deploy-ERP-RxLightLevelHigh-Alert.json @@ -0,0 +1,269 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ERP_ExpressRoutRxLightLevell_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ER Direct ExpressRoute RxLightLevel High Alert", + "description": "Policy to audit/deploy ER Direct RxLightLevel High Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "1" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT5M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "0" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "disabled" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "RxLightLevel" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].StaticThresholdCriterion.operator", + "equals": "GreaterThan" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-DirectERRxLightLevelHighAlert')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ER Direct Connection RxLightLevelHigh", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "RxLightLevel", + "metricNamespace": "Microsoft.Network/expressRoutePorts", + "metricName": "RxLightLevel", + "operator": "GreaterThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/expressRoutePorts/Deploy-ERP-RxLightLevelLow-Alert.json b/services/Network/expressRoutePorts/Deploy-ERP-RxLightLevelLow-Alert.json new file mode 100644 index 000000000..4e82b77c5 --- /dev/null +++ b/services/Network/expressRoutePorts/Deploy-ERP-RxLightLevelLow-Alert.json @@ -0,0 +1,269 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ERP_ExpressRoutRxLightLevellow_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ER Direct ExpressRoute RxLightLevel Low Alert", + "description": "Policy to audit/deploy ER Direct RxLightLevel Low Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "1" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT5M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "-10" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "disabled" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "RxLightLevel" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].StaticThresholdCriterion.operator", + "equals": "LessThan" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-DirectERRxLightLevelLowAlert')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ER Direct Connection RxLightLevelLow", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "RxLightLevel", + "metricNamespace": "Microsoft.Network/expressRoutePorts", + "metricName": "RxLightLevel", + "operator": "LessThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/expressRoutePorts/Deploy-ERP-TxLightLevelHigh-Alert.json b/services/Network/expressRoutePorts/Deploy-ERP-TxLightLevelHigh-Alert.json new file mode 100644 index 000000000..76d70491a --- /dev/null +++ b/services/Network/expressRoutePorts/Deploy-ERP-TxLightLevelHigh-Alert.json @@ -0,0 +1,269 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ERP_ExpressRoutTxLightLevell_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ER Direct ExpressRoute TxLightLevel High Alert", + "description": "Policy to audit/deploy ER Direct TxLightLevel High Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "1" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT5M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "0" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "disabled" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "TxLightLevel" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].StaticThresholdCriterion.operator", + "equals": "GreaterThan" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-DirectERTxLightLevelHighAlert')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ER Direct Connection TxLightLevelHigh", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "TxLightLevel", + "metricNamespace": "Microsoft.Network/expressRoutePorts", + "metricName": "TxLightLevel", + "operator": "GreaterThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/expressRoutePorts/Deploy-ERP-TxLightLevelLow-Alert.json b/services/Network/expressRoutePorts/Deploy-ERP-TxLightLevelLow-Alert.json new file mode 100644 index 000000000..0bacbc56c --- /dev/null +++ b/services/Network/expressRoutePorts/Deploy-ERP-TxLightLevelLow-Alert.json @@ -0,0 +1,269 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ERP_ExpressRoutTxLightLevellow_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ER Direct ExpressRoute TxLightLevel Low Alert", + "description": "Policy to audit/deploy ER Direct TxLightLevel Low Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "1" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT5M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "-10" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "disabled" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/expressRoutePorts" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "TxLightLevel" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].StaticThresholdCriterion.operator", + "equals": "LessThan" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/expressRoutePorts/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-DirectERTxLightLevelLowAlert')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ER Direct Connection TxLightLevelLow", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "TxLightLevel", + "metricNamespace": "Microsoft.Network/expressRoutePorts", + "metricName": "TxLightLevel", + "operator": "LessThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/loadBalancers/Deploy-LB-DatapathAvailability-Alert.json b/services/Network/loadBalancers/Deploy-LB-DatapathAvailability-Alert.json new file mode 100644 index 000000000..5e4411099 --- /dev/null +++ b/services/Network/loadBalancers/Deploy-LB-DatapathAvailability-Alert.json @@ -0,0 +1,269 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ALB_DataPathAvailability_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ALB Data Path Availability Alert", + "description": "Policy to audit/deploy Azure Load Balancer Data Path Availability Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "0" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "90" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/loadBalancers" + }, + { + "field": "Microsoft.Network/loadBalancers/sku.name", + "in": ["Standard", "Gateway"] + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/loadBalancers" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "VipAvailability" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-ALBDataPathAvailability')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ALB Data Path Availability", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "VipAvailability", + "metricNamespace": "Microsoft.Network/loadBalancers", + "metricName": "VipAvailability", + "operator": "LessThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/loadBalancers/Deploy-LB-GlobalBackendAvailability-Alert.json b/services/Network/loadBalancers/Deploy-LB-GlobalBackendAvailability-Alert.json new file mode 100644 index 000000000..430d726ce --- /dev/null +++ b/services/Network/loadBalancers/Deploy-LB-GlobalBackendAvailability-Alert.json @@ -0,0 +1,269 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ALB_GlobalBackendAvailability_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ALB Global Backend Availability Alert", + "description": "Policy to audit/deploy Azure Load Balancer Global Backend Availability Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "0" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "90" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/loadBalancers" + }, + { + "field": "Microsoft.Network/loadBalancers/sku.tier", + "equals": "Global" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/loadBalancers" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "GlobalBackendAvailability" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-ALBGlobalBackendAvailability')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for Global Backend Availability", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "GlobalBackendAvailability", + "metricNamespace": "Microsoft.Network/loadBalancers", + "metricName": "GlobalBackendAvailability", + "operator": "LessThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/loadBalancers/Deploy-LB-HealthProbeStatus-Alert.json b/services/Network/loadBalancers/Deploy-LB-HealthProbeStatus-Alert.json new file mode 100644 index 000000000..92caa818e --- /dev/null +++ b/services/Network/loadBalancers/Deploy-LB-HealthProbeStatus-Alert.json @@ -0,0 +1,273 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ALB_HealthProbeStatus_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ALB Health Probe Status Alert", + "description": "Policy to audit/deploy Azure Load Balancer Health Probe Status Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "2" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "90" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/loadBalancers" + }, + { + "field": "Microsoft.Network/loadBalancers/sku.name", + "in": ["Standard", "Gateway"] + }, + { + "field": "Microsoft.Network/loadBalancers/sku.tier", + "equals": "Regional" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/loadBalancers" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "DipAvailability" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-ALBHealthProbeStatus')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ALB Health Probe Status", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "DipAvailability", + "metricNamespace": "Microsoft.Network/loadBalancers", + "metricName": "DipAvailability", + "operator": "LessThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/Network/loadBalancers/Deploy-LB-UsedSNATPorts-Alert.json b/services/Network/loadBalancers/Deploy-LB-UsedSNATPorts-Alert.json new file mode 100644 index 000000000..7a7b5a814 --- /dev/null +++ b/services/Network/loadBalancers/Deploy-LB-UsedSNATPorts-Alert.json @@ -0,0 +1,265 @@ +{ + "type": "Microsoft.Authorization/policyDefinitions", + "apiVersion": "2021-06-01", + "name": "Deploy_ALB_UsedSNATPorts_Alert", + "properties": { + "policyType": "Custom", + "mode": "All", + "displayName": "Deploy ALB Used SNAT Ports Alert", + "description": "Policy to audit/deploy Azure Load Balancer Used SNAT Ports Alert", + "metadata": { + "version": "1.0.1", + "Category": "Networking", + "source": "https://github.com/Azure/azure-monitor-baseline-alerts/", + "_deployed_by_amba": "True" + }, + "parameters": { + "severity": { + "type": "String", + "metadata": { + "displayName": "Severity", + "description": "Severity of the Alert" + }, + "allowedValues": ["0", "1", "2", "3", "4"], + "defaultValue": "1" + }, + "windowSize": { + "type": "String", + "metadata": { + "displayName": "Window Size", + "description": "Window size for the alert" + }, + "allowedValues": [ + "PT1M", + "PT5M", + "PT15M", + "PT30M", + "PT1H", + "PT6H", + "PT12H", + "P1D" + ], + "defaultValue": "PT5M" + }, + "evaluationFrequency": { + "type": "String", + "metadata": { + "displayName": "Evaluation Frequency", + "description": "Evaluation frequency for the alert" + }, + "allowedValues": ["PT1M", "PT5M", "PT15M", "PT30M", "PT1H"], + "defaultValue": "PT1M" + }, + "autoMitigate": { + "type": "String", + "metadata": { + "displayName": "Auto Mitigate", + "description": "Auto Mitigate for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "enabled": { + "type": "String", + "metadata": { + "displayName": "Alert State", + "description": "Alert state for the alert" + }, + "allowedValues": ["true", "false"], + "defaultValue": "true" + }, + "threshold": { + "type": "String", + "metadata": { + "displayName": "Threshold", + "description": "Threshold for the alert" + }, + "defaultValue": "900" + }, + "effect": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Effect of the policy" + }, + "allowedValues": ["deployIfNotExists", "disabled"], + "defaultValue": "deployIfNotExists" + }, + "MonitorDisable": { + "type": "String", + "metadata": { + "displayName": "Effect", + "description": "Tag name to disable monitoring resource. Set to true if monitoring should be disabled" + }, + "defaultValue": "MonitorDisable" + } + }, + "policyRule": { + "if": { + "allOf": [ + { + "field": "type", + "equals": "Microsoft.Network/loadBalancers" + }, + { + "field": "[[concat('tags[', parameters('MonitorDisable'), ']')]", + "notEquals": "true" + } + ] + }, + "then": { + "effect": "[[parameters('effect')]", + "details": { + "roleDefinitionIds": [ + "/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c" + ], + "type": "Microsoft.Insights/metricAlerts", + "existenceCondition": { + "allOf": [ + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricNamespace", + "equals": "Microsoft.Network/loadBalancers" + }, + { + "field": "Microsoft.Insights/metricAlerts/criteria.Microsoft.Azure.Monitor.MultipleResourceMultipleMetricCriteria.allOf[*].metricName", + "equals": "UsedSNATPorts" + }, + { + "field": "Microsoft.Insights/metricalerts/scopes[*]", + "equals": "[[concat(subscription().id, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/loadBalancers/', field('fullName'))]" + }, + { + "field": "Microsoft.Insights/metricAlerts/enabled", + "equals": "[[parameters('enabled')]" + } + ] + }, + "deployment": { + "properties": { + "mode": "incremental", + "template": { + "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "resourceName": { + "type": "String", + "metadata": { + "displayName": "resourceName", + "description": "Name of the resource" + } + }, + "resourceId": { + "type": "String", + "metadata": { + "displayName": "resourceId", + "description": "Resource ID of the resource emitting the metric that will be used for the comparison" + } + }, + "severity": { + "type": "String" + }, + "windowSize": { + "type": "String" + }, + "evaluationFrequency": { + "type": "String" + }, + "autoMitigate": { + "type": "String" + }, + "enabled": { + "type": "String" + }, + "threshold": { + "type": "String" + } + }, + "variables": {}, + "resources": [ + { + "type": "Microsoft.Insights/metricAlerts", + "apiVersion": "2018-03-01", + "name": "[[concat(parameters('resourceName'), '-ALBUsedSNATPorts')]", + "location": "global", + "tags": { + "_deployed_by_amba": true + }, + "properties": { + "description": "Metric Alert for ALB Used SNAT Ports", + "severity": "[[parameters('severity')]", + "enabled": "[[parameters('enabled')]", + "scopes": ["[[parameters('resourceId')]"], + "evaluationFrequency": "[[parameters('evaluationFrequency')]", + "windowSize": "[[parameters('windowSize')]", + "criteria": { + "allOf": [ + { + "name": "UsedSNATPorts", + "metricNamespace": "Microsoft.Network/loadBalancers", + "metricName": "UsedSNATPorts", + "operator": "GreaterThan", + "threshold": "[[parameters('threshold')]", + "timeAggregation": "Average", + "criterionType": "StaticThresholdCriterion" + } + ], + "odata.type": "Microsoft.Azure.Monitor.SingleResourceMultipleMetricCriteria" + }, + "autoMitigate": "[[parameters('autoMitigate')]", + "parameters": { + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + ] + }, + "parameters": { + "resourceName": { + "value": "[[field('name')]" + }, + "resourceId": { + "value": "[[field('id')]" + }, + "severity": { + "value": "[[parameters('severity')]" + }, + "windowSize": { + "value": "[[parameters('windowSize')]" + }, + "evaluationFrequency": { + "value": "[[parameters('evaluationFrequency')]" + }, + "autoMitigate": { + "value": "[[parameters('autoMitigate')]" + }, + "enabled": { + "value": "[[parameters('enabled')]" + }, + "threshold": { + "value": "[[parameters('threshold')]" + } + } + } + } + } + } + } + } +} diff --git a/services/compute/virtualMachines/Deploy-VM-DataDiskReadLatency-Alert.json b/services/compute/virtualMachines/Deploy-VM-DataDiskReadLatency-Alert.json index b223ba2ef..3fac1fd29 100644 --- a/services/compute/virtualMachines/Deploy-VM-DataDiskReadLatency-Alert.json +++ b/services/compute/virtualMachines/Deploy-VM-DataDiskReadLatency-Alert.json @@ -172,7 +172,7 @@ "failingPeriods": { "type": "String", "metadata": { - "disaplayname": "Failing Periods", + "displayName": "Failing Periods", "description": "Number of failing periods before alert is fired" }, "defaultValue": "1" @@ -180,7 +180,7 @@ "evaluationPeriods": { "type": "String", "metadata": { - "displayname": "Evaluation Periods", + "displayName": "Evaluation Periods", "description": "The number of aggregated lookback points." }, "defaultValue": "1" @@ -188,7 +188,7 @@ "computersToInclude": { "type": "array", "metadata": { - "displayname": "Disks to be included to be monitored", + "displayName": "Disks to be included to be monitored", "description": "Array of Computer to be monitored" }, "defaultValue": [ @@ -351,10 +351,10 @@ { "type": "Microsoft.Insights/scheduledQueryRules", "apiVersion": "2022-08-01-preview", - "name": "[[concat(subscription().displayName, '-VMHighdataDiskReadLatencyAlert')]", + "name": "[[concat(subscription().displayName, '-VMLowdataDiskReadLatencyAlert')]", "location": "[[parameters('alertResourceGroupLocation')]", "properties": { - "displayName": "[[concat(subscription().displayName, '-VMHighdataDiskReadLatencyAlert')]", + "displayName": "[[concat(subscription().displayName, '-VMLwdataDiskReadLatencyAlert')]", "description": "Log Alert for Virtual Machine dataDiskReadLatency", "severity": "[[parameters('severity')]", "enabled": "[[parameters('enabled')]", diff --git a/services/compute/virtualMachines/Deploy-VM-DataDiskSpace-Alert.json b/services/compute/virtualMachines/Deploy-VM-DataDiskSpace-Alert.json index 7401afb67..03d68be70 100644 --- a/services/compute/virtualMachines/Deploy-VM-DataDiskSpace-Alert.json +++ b/services/compute/virtualMachines/Deploy-VM-DataDiskSpace-Alert.json @@ -172,7 +172,7 @@ "failingPeriods": { "type": "String", "metadata": { - "disaplayname": "Failing Periods", + "displayName": "Failing Periods", "description": "Number of failing periods before alert is fired" }, "defaultValue": "1" @@ -180,7 +180,7 @@ "evaluationPeriods": { "type": "String", "metadata": { - "disaplayname": "Evaluation Periods", + "displayName": "Evaluation Periods", "description": "The number of aggregated lookback points." }, "defaultValue": "1" diff --git a/services/compute/virtualMachines/Deploy-VM-DataDiskWriteLatency-Alert.json b/services/compute/virtualMachines/Deploy-VM-DataDiskWriteLatency-Alert.json index d3f3e679a..8a047f5c7 100644 --- a/services/compute/virtualMachines/Deploy-VM-DataDiskWriteLatency-Alert.json +++ b/services/compute/virtualMachines/Deploy-VM-DataDiskWriteLatency-Alert.json @@ -172,7 +172,7 @@ "failingPeriods": { "type": "String", "metadata": { - "disaplayname": "Failing Periods", + "displayName": "Failing Periods", "description": "Number of failing periods before alert is fired" }, "defaultValue": "1" @@ -351,10 +351,10 @@ { "type": "Microsoft.Insights/scheduledQueryRules", "apiVersion": "2022-08-01-preview", - "name": "[[concat(subscription().displayName, '-VMHighdataDiskWriteLatencyAlert')]", + "name": "[[concat(subscription().displayName, '-VMLowdataDiskWriteLatencyAlert')]", "location": "[[parameters('alertResourceGroupLocation')]", "properties": { - "displayName": "[[concat(subscription().displayName, '-VMHighdataDiskWriteLatencyAlert')]", + "displayName": "[[concat(subscription().displayName, '-VMLowdataDiskWriteLatencyAlert')]", "description": "Log Alert for Virtual Machine dataDiskWriteLatency", "severity": "[[parameters('severity')]", "enabled": "[[parameters('enabled')]", diff --git a/services/compute/virtualMachines/Deploy-VM-HeartBeat-Alert.json b/services/compute/virtualMachines/Deploy-VM-HeartBeat-Alert.json index 6f2b1b12d..1146896c0 100644 --- a/services/compute/virtualMachines/Deploy-VM-HeartBeat-Alert.json +++ b/services/compute/virtualMachines/Deploy-VM-HeartBeat-Alert.json @@ -172,7 +172,7 @@ "failingPeriods": { "type": "String", "metadata": { - "disaplayname": "Failing Periods", + "displayName": "Failing Periods", "description": "Number of failing periods before alert is fired" }, "defaultValue": "1" @@ -180,7 +180,7 @@ "evaluationPeriods": { "type": "String", "metadata": { - "displayname": "Evaluation Periods", + "displayName": "Evaluation Periods", "description": "The number of aggregated lookback points." }, "defaultValue": "1" diff --git a/services/compute/virtualMachines/Deploy-VM-NetworkIn-Alert.json b/services/compute/virtualMachines/Deploy-VM-NetworkIn-Alert.json index 87117b3c7..85175f21e 100644 --- a/services/compute/virtualMachines/Deploy-VM-NetworkIn-Alert.json +++ b/services/compute/virtualMachines/Deploy-VM-NetworkIn-Alert.json @@ -309,7 +309,7 @@ "computersToInclude": { "type": "array" }, - "networkInterfaceToInclude": { + "networkInterfacesToInclude": { "type": "array" } }, @@ -369,7 +369,7 @@ "criteria": { "allOf": [ { - "query": "InsightsMetrics| where Origin == \"vm.azm.ms\"| where Namespace == \"Network\" and Name == \"ReadBytesPerSecond\"| | extend NetworkInterface=tostring(todynamic(Tags)[\"vm.azm.ms/networkDeviceId\"])|summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, NetworkInterface", + "query": "InsightsMetrics| where Origin == \"vm.azm.ms\"| where Namespace == \"Network\" and Name == \"ReadBytesPerSecond\"| extend NetworkInterface=tostring(todynamic(Tags)[\"vm.azm.ms/networkDeviceId\"])|summarize AggregatedValue = avg(Val) by bin(TimeGenerated, 15m), Computer, _ResourceId, NetworkInterface", "metricMeasureColumn": "AggregatedValue", "threshold": "[[parameters('threshold')]", "operator": "[[parameters('operator')]", diff --git a/services/compute/virtualMachines/Deploy-VM-NetworkOut-Alert.json b/services/compute/virtualMachines/Deploy-VM-NetworkOut-Alert.json index 1cd69db6e..9cb7dcf0b 100644 --- a/services/compute/virtualMachines/Deploy-VM-NetworkOut-Alert.json +++ b/services/compute/virtualMachines/Deploy-VM-NetworkOut-Alert.json @@ -188,7 +188,7 @@ "computersToInclude": { "type": "array", "metadata": { - "displayname": "Disks to be included to be monitored", + "displayname": "Computers to be included to be monitored", "description": "Array of Computer to be monitored" }, "defaultValue": [ @@ -241,7 +241,7 @@ "allOf": [ { "field": "Microsoft.Insights/scheduledQueryRules/displayName", - "equals": "[[concat(subscription().displayName, '-VMHighNetwrokInAlert')]" + "equals": "[[concat(subscription().displayName, '-VMHighNetworkOutAlert')]" }, { "field": "Microsoft.Insights/scheduledqueryrules/scopes[*]", @@ -309,7 +309,7 @@ "computersToInclude": { "type": "array" }, - "networkInterfaceToInclude": { + "networkInterfacesToInclude": { "type": "array" } }, @@ -354,7 +354,7 @@ "name": "[[concat(subscription().displayName, '-VMHighNetworkOutAlert')]", "location": "[[parameters('alertResourceGroupLocation')]", "properties": { - "displayName": "[[concat(subscription().displayName, '-VMHighNetworOutAlert')]", + "displayName": "[[concat(subscription().displayName, '-VMHighNetworkOutAlert')]", "description": "Log Alert for Virtual Machine NetworkOut", "severity": "[[parameters('severity')]", "enabled": "[[parameters('enabled')]", diff --git a/services/compute/virtualMachines/Deploy-VM-OSDiskReadLatency-Alert.json b/services/compute/virtualMachines/Deploy-VM-OSDiskReadLatency-Alert.json index 82aab9422..23b19e9c6 100644 --- a/services/compute/virtualMachines/Deploy-VM-OSDiskReadLatency-Alert.json +++ b/services/compute/virtualMachines/Deploy-VM-OSDiskReadLatency-Alert.json @@ -172,7 +172,7 @@ "failingPeriods": { "type": "String", "metadata": { - "disaplayname": "Failing Periods", + "displayName": "Failing Periods", "description": "Number of failing periods before alert is fired" }, "defaultValue": "1" @@ -180,7 +180,7 @@ "evaluationPeriods": { "type": "String", "metadata": { - "displayname": "Evaluation Periods", + "displayName": "Evaluation Periods", "description": "The number of aggregated lookback points." }, "defaultValue": "1" diff --git a/services/compute/virtualMachines/Deploy-VM-OSDiskSpace-Alert.json b/services/compute/virtualMachines/Deploy-VM-OSDiskSpace-Alert.json index a735fba40..ec8668542 100644 --- a/services/compute/virtualMachines/Deploy-VM-OSDiskSpace-Alert.json +++ b/services/compute/virtualMachines/Deploy-VM-OSDiskSpace-Alert.json @@ -172,7 +172,7 @@ "failingPeriods": { "type": "String", "metadata": { - "disaplayname": "Failing Periods", + "displayName": "Failing Periods", "description": "Number of failing periods before alert is fired" }, "defaultValue": "1" @@ -180,7 +180,7 @@ "evaluationPeriods": { "type": "String", "metadata": { - "displayname": "Evaluation Periods", + "displayName": "Evaluation Periods", "description": "The number of aggregated lookback points." }, "defaultValue": "1" @@ -188,7 +188,7 @@ "computersToInclude": { "type": "array", "metadata": { - "displayname": "Disks to be included to be monitored", + "displayName": "Disks to be included to be monitored", "description": "Array of Computer to be monitored" }, "defaultValue": [ diff --git a/services/compute/virtualMachines/Deploy-VM-OSDiskWriteLatency-Alert.json b/services/compute/virtualMachines/Deploy-VM-OSDiskWriteLatency-Alert.json index 98ff43cf5..b04017f39 100644 --- a/services/compute/virtualMachines/Deploy-VM-OSDiskWriteLatency-Alert.json +++ b/services/compute/virtualMachines/Deploy-VM-OSDiskWriteLatency-Alert.json @@ -172,7 +172,7 @@ "failingPeriods": { "type": "String", "metadata": { - "disaplayname": "Failing Periods", + "displayName": "Failing Periods", "description": "Number of failing periods before alert is fired" }, "defaultValue": "1" @@ -180,7 +180,7 @@ "evaluationPeriods": { "type": "String", "metadata": { - "displayname": "Evaluation Periods", + "displayName": "Evaluation Periods", "description": "The number of aggregated lookback points." }, "defaultValue": "1"