Resource Health

Overview:

The following section goes over the Resource Health Category of Azure Activity logs and provides the appropriate schema for these logs.

Resource Health Logs:

The Resource Health category in the Azure Activity Log records events related to the health status of your Azure resources. These events reflect changes in resource health, such as a virtual machine becoming unavailable, and can indicate one of four statuses: Available, Unavailable, Degraded, or Unknown. Resource health events are logged when a resource's health changes significantly, such as moving to or from an unhealthy state, or remaining unhealthy for more than 15 minutes. However, certain transitions, like brief or initial changes to an Unknown state, are not recorded. Additionally, these events can be classified as either Platform Initiated or User Initiated.

Resource Health Log Schema

Element Name	Description
channels	Always “Admin, Operation”
correlationId	A GUID in the string format.
description	Static text description of the alert event.
eventDataId	Unique identifier of the alert event.
category	Always "ResourceHealth"
eventTimestamp	Timestamp when the event was generated by the Azure service processing the request corresponding the event.
level	Severity level of the event.
operationId	A GUID shared among the events that correspond to a single operation.
operationName	Name of the operation.
resourceGroupName	Name of the resource group that contains the resource.
resourceProviderName	Always "Microsoft.Resourcehealth/healthevent/action".
resourceType	The type of resource affected by a Resource Health event.
resourceId	Name of the resource ID for the impacted resource.
status	String describing the status of the health event. Values can be: Active, Resolved, InProgress, Updated.
subStatus	Usually null for alerts.
submissionTimestamp	Timestamp when the event became available for querying.
subscriptionId	Azure Subscription ID.
properties	Set of <Key, Value> pairs (that is, a Dictionary) describing the details of the event.
properties.title	A user-friendly string that describes the health status of the resource.
properties.details	A user-friendly string that describes further details about the event.
properties.currentHealthStatus	The current health status of the resource. One of the following values: "Available", "Unavailable", "Degraded", and "Unknown".
properties.previousHealthStatus	The previous health status of the resource. One of the following values: "Available", "Unavailable", "Degraded", and "Unknown".
properties.type	A description of the type of resource health event.
properties.cause	A description of the cause of the resource health event. Either "UserInitiated" and "PlatformInitiated".