# Migrate Prometheus rule delivery separately from scrape configuration

> Does reusing Prometheus scrape configuration also migrate PrometheusRule resources to Azure Managed Prometheus?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-476-migrate-prometheus-rule-delivery-separately-from-scrape-configuration/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:24:00+00:00
- Modified: 2026-09-10T02:08:05+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

Does reusing Prometheus scrape configuration also migrate PrometheusRule resources to Azure Managed Prometheus?

## Potentially affected

Self-hosted Prometheus deployments moving collection and alerting to Azure Monitor managed service for Prometheus.

## DSE recommendation

Track scrape configuration and alerting or recording-rule delivery as separate migration work items.

## Article

## Source facts

Azure Managed Prometheus does not support the PrometheusRule custom resource. Existing alerting and recording rules instead use Azure Prometheus rule groups, with Microsoft documenting conversion to an Azure Resource Manager template. Migrating pod and service monitors also requires changing their apiVersion to azmonitoring.coreos.com/v1. Successfully transferring collection configuration therefore does not by itself complete rule migration. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-migrate).

## Applicability

Use this distinction when an existing Prometheus deployment relies on Kubernetes custom resources for both scraping and rules. Inventory what the current configuration actually deploys rather than treating every resource in the same repository as equivalent.

## DSE recommendation

Track scrape configuration and alerting or recording-rule delivery as separate migration work items. Have the monitoring owner identify each rule that must survive and its intended destination rule group. Keep the collection owner responsible for the supported monitor definitions, while assigning a named reviewer to the converted alert and recording logic. Do not remove the old rule-delivery path solely because metrics are visible in the new workspace.

## Verification

In the migration pilot, confirm representative targets are scraped and their expected metrics can be queried. Separately inspect the deployed rule inventory and exercise an approved alert workflow. Compare recording-rule outputs that downstream dashboards or alerts depend on. Preserve the mapping from the original rule object to the deployed Azure resource, including deliberate omissions, so a successful scrape is not mistaken for complete alerting coverage.

## Official references

[Microsoft Learn: Migrate self-hosted Prometheus](https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-migrate). Source reviewed September 9, 2026.

## Primary reference

- Name: Migrate from Self-Hosted Prometheus to Azure Monitor Managed Service for Prometheus - Azure Monitor | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/azure-monitor/metrics/prometheus-migrate
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Migrate Prometheus rule delivery separately from scrape configuration,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-476-migrate-prometheus-rule-delivery-separately-from-scrape-configuration/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.