services/Network/vpnGateways/alerts.yaml

- name: Activity Log VPN Gateway Delete
  description: Activity Log Alert for VPN Gateway Delete
  type: ActivityLog
  verified: false
  visible: true
  tags:
  - alz
  properties:
    category: Administrative
    operationName: Microsoft.Network/vpnGateways/delete
    status:
    - succeeded
  references:
  - name: Activity Log Service Notifications
    url: https://learn.microsoft.com/azure/service-health/alerts-activity-log-service-notifications-portal
  - name: Best practices for setting up service health alerts
    url: https://www.microsoft.com/videoplayer/embed/RE2OtUa
  deployments:
  - name: Deploy Activity Log VPN Gateway Delete Alert
    template: Deploy-ActivityLog-VPNG-Del.json
    type: Policy
    tags:
    - alz
    properties:
      scope: Subscription
      policyScope: managementGroup
      documented: false
      alertName: ActivityVPNGatewayDelete
      enabled: true
  guid: 50c8313a-bbe7-4981-8eee-4b4d44fda37f
- name: TunnelAverageBandwidth
  description: Metric Alert for VPN Gateway Bandwidth Utilization
  type: Metric
  verified: false
  visible: true
  tags:
  - alz
  properties:
    metricName: TunnelAverageBandwidth
    metricNamespace: Microsoft.Network/vpnGateways
    severity: 0
    windowSize: PT5M
    evaluationFrequency: PT1M
    timeAggregation: Average
    operator: LessThan
    threshold: 1
    criterionType: StaticThresholdCriterion
    autoMitigate: false
    enabled: true
  references:
  - name: Activity Log Service Notifications
    url: https://learn.microsoft.com/en-us/azure/service-health/alerts-activity-log-service-notifications-portal
  - name: Best practices for setting up service health alerts
    url: https://www.microsoft.com/videoplayer/embed/RE2OtUa
  deployments:
  - name: Deploy VPNG Bandwidth Utilization Alert
    template: Deploy-VPNG-BandwidthUtilization-Alert.json
    type: Policy
    tags:
    - alz
    properties:
      scope: Resource
      multiResource: false
  guid: d74fd111-125f-45b8-8bbc-e23bd40aa869
- name: BGP Peer Status
  description: Metric Alert for VPN Gateway BGP peer status
  type: Metric
  verified: false
  visible: true
  tags:
  - alz
  properties:
    metricName: BgpPeerStatus
    metricNamespace: Microsoft.Network/vpnGateways
    severity: 0
    windowSize: PT5M
    evaluationFrequency: PT1M
    timeAggregation: Total
    operator: LessThan
    threshold: 1
    criterionType: StaticThresholdCriterion
    autoMitigate: false
    enabled: true
  references:
  - name: Supported metrics for microsoft.network/vpngateways
    url: https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-network-vpngateways-metrics
  deployments:
  - name: Deploy VPNG BGP Peer Status Alert
    template: Deploy-VPNG-BGPPeerStatus-Alert.json
    type: Policy
    tags:
    - alz
    properties:
      scope: Resource
      multiResource: false
  guid: b0ea832c-aae8-42c0-ad83-0bb13d66d56e
- name: TunnelEgressBytes
  description: Metric Alert for VPN Gateway tunnel egress bytes
  type: Metric
  verified: false
  visible: true
  tags:
  - alz
  properties:
    metricName: TunnelEgressBytes
    metricNamespace: Microsoft.Network/vpnGateways
    severity: 0
    windowSize: PT5M
    evaluationFrequency: PT5M
    timeAggregation: Average
    operator: LessThan
    threshold: 1
    criterionType: StaticThresholdCriterion
    autoMitigate: false
    enabled: true
  references:
  - name: Supported metrics for microsoft.network/vpngateways
    url: https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-network-vpngateways-metrics
  deployments:
  - name: Deploy VPNG Egress Alert
    template: Deploy-VPNG-Egress-Alert.json
    type: Policy
    tags:
    - alz
    properties:
      scope: Resource
      multiResource: false
  guid: cd3b834d-f34f-4a67-af01-b1c5d32195a9
- name: TunnelEgressPacketDropCount
  description: Metric Alert for VPN Gateway tunnel TunnelEgressPacketDropCount
  type: Metric
  verified: false
  visible: true
  tags:
  - alz
  properties:
    metricName: TunnelEgressPacketDropCount
    metricNamespace: Microsoft.Network/vpnGateways
    severity: 3
    windowSize: PT5M
    evaluationFrequency: PT5M
    timeAggregation: Average
    operator: GreaterThan
    criterionType: DynamicThresholdCriterion
    alertSensitivity: Medium
    failingPeriods:
      numberOfEvaluationPeriods: 4
      minFailingPeriodsToAlert: 4
    autoMitigate: false
    enabled: true
  references:
  - name: Supported metrics for microsoft.network/vpngateways
    url: https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-network-vpngateways-metrics
  deployments:
  - name: Deploy VPNG Egress Packet Drop Count Alert
    template: Deploy-VPNG-EgressPacketDropCount-Alert.json
    type: Policy
    tags:
    - alz
    properties:
      scope: Resource
      multiResource: false
  guid: c5ae6d80-59db-4087-8e9b-0df36c54ebe9
- name: TunnelEgressPacketDropTSMismatch
  description: Metric Alert for VPN Gateway tunnel TunnelEgressPacketDropTSMismatch
  type: Metric
  verified: false
  visible: true
  tags:
  - alz
  properties:
    metricName: TunnelEgressPacketDropTSMismatch
    metricNamespace: Microsoft.Network/vpnGateways
    severity: 3
    windowSize: PT5M
    evaluationFrequency: PT5M
    timeAggregation: Average
    operator: GreaterThan
    criterionType: DynamicThresholdCriterion
    alertSensitivity: Medium
    failingPeriods:
      numberOfEvaluationPeriods: 4
      minFailingPeriodsToAlert: 4
    autoMitigate: false
    enabled: true
  references:
  - name: Supported metrics for microsoft.network/vpngateways
    url: https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-network-vpngateways-metrics
  deployments:
  - name: Deploy VPNG Egress Packet Drop Mismatch Alert
    template: Deploy-VPNG-EgressPacketDropMismatch-Alert.json
    type: Policy
    tags:
    - alz
    properties:
      scope: Resource
      multiResource: false
  guid: 7b361791-127e-4a6f-9c1b-c8d9f41ec223
- name: TunnelIngressBytes
  description: Metric Alert for VPN Gateway TunnelIngressBytes
  type: Metric
  verified: false
  visible: true
  tags:
  - alz
  properties:
    metricName: TunnelIngressBytes
    metricNamespace: Microsoft.Network/vpnGateways
    severity: 0
    windowSize: PT5M
    evaluationFrequency: PT5M
    timeAggregation: Average
    operator: LessThan
    threshold: 1
    criterionType: StaticThresholdCriterion
    autoMitigate: false
    enabled: true
  references:
  - name: Supported metrics for microsoft.network/vpngateways
    url: https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-network-vpngateways-metrics
  deployments:
  - name: Deploy VPNG Ingress Alert
    template: Deploy-VPNG-Ingress-Alert.json
    type: Policy
    tags:
    - alz
    properties:
      scope: Resource
      multiResource: false
  guid: a05d97b8-37b9-4100-a860-d57363aaaf5f
- name: TunnelIngressPacketDropCount
  description: Metric Alert for VPN Gateway tunnel TunnelIngressPacketDropCount
  type: Metric
  verified: false
  visible: true
  tags:
  - alz
  properties:
    metricName: TunnelIngressPacketDropCount
    metricNamespace: Microsoft.Network/vpnGateways
    severity: 3
    windowSize: PT5M
    evaluationFrequency: PT5M
    timeAggregation: Average
    operator: GreaterThan
    criterionType: DynamicThresholdCriterion
    alertSensitivity: Medium
    failingPeriods:
      numberOfEvaluationPeriods: 4
      minFailingPeriodsToAlert: 4
    autoMitigate: false
    enabled: true
  references:
  - name: Supported metrics for microsoft.network/vpngateways
    url: https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-network-vpngateways-metrics
  deployments:
  - name: Deploy VNetG Ingress Packet Drop Count Alert
    template: Deploy-VNETG-IngressPacketDropMismatch-Alert.json
    type: Policy
    tags:
    - alz
    properties:
      scope: Resource
      multiResource: false
  guid: c2c9a09d-7fad-4c67-9a29-4c2c376a7214
- name: TunnelIngressPacketDropTSMismatch
  description: Metric Alert for Vnet Gateway tunnel TunnelIngressPacketDropTSMismatch
  type: Metric
  verified: false
  visible: true
  tags:
  - alz
  properties:
    metricName: TunnelIngressPacketDropTSMismatch
    metricNamespace: Microsoft.Network/vpnGateways
    severity: 3
    windowSize: PT5M
    evaluationFrequency: PT5M
    timeAggregation: Average
    operator: GreaterThan
    criterionType: DynamicThresholdCriterion
    alertSensitivity: Medium
    failingPeriods:
      numberOfEvaluationPeriods: 4
      minFailingPeriodsToAlert: 4
    autoMitigate: false
    enabled: true
  references:
  - name: Supported metrics for microsoft.network/vpngateways
    url: https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-metrics/microsoft-network-vpngateways-metrics
  deployments:
  - name: Deploy VPNG Ingress Packet Drop Mismatch Alert
    template: Deploy-VNETG-IngressPacketDropMismatch-Alert.json
    type: Policy
    tags:
    - alz
    properties:
      scope: Resource
      multiResource: false
  guid: 7affb4da-2058-4f12-b15b-ca58e92b63e5