I am trying to configure an alert in Azure that will send an email when a device has responded as "offline" 3 or more times in the last 15 minutes. The query I am using returns a summarized table with two columns, "Name" and "Count", where Count represents the number of offline responses.
| Name | Count |
|---|---|
| ABC | 4 |
| DEF | 3 |
My issue comes into play when trying to set up the conditions for the alert. Ideally I want to trigger an alert for any row where Count is greater than or equal to 3.
I can measure off of Table Rows or Count, but cannot seem to wrap my head around how to set up measurement and dimension splitting in a way that behaves similar to my goal I covered above. Thus far I have been able to set it up using Count, but it seems to only allow aggregating the values in Count, rather than looking at each row individually.
I have considered writing individual queries for each device that would return every offline response, and simply alerting off of the number of rows returned. I would much rather keep this contained to a single query. Thank you for any help you can provide.
