GuideInformationCybersecurityIT

Remove target-type filters before declaring a Resource Health alert missing

An alert inventory view can exclude Resource Health rules through its filter settings.

Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.
DSE visual intelligenceCyber defenseGuide · 1 min read
Executive summary

What you need to know

An alert inventory view can exclude Resource Health rules through its filter settings.

Potentially affected

Use this review when a known Resource Health alert rule is absent from a portal inventory. Record the current filters, subscription context and expected rule identifier. This display behavior does not prove that the rule exists or is enabled; it identifies one visibility check.

DSE recommendation

DSE recommends preserving the original view and then checking the broader subscription or resource-group list before creating a replacement.

Source facts

Microsoft notes that filtering the alert-rules list by target resource type excludes Resource Health alert rules. To see those rules, it instructs operators to remove that filter or filter by resource group or subscription instead. Microsoft Learn.

Applicability

Use this review when a known Resource Health alert rule is absent from a portal inventory. Record the current filters, subscription context and expected rule identifier. This display behavior does not prove that the rule exists or is enabled; it identifies one visibility check.

DSE recommendation

DSE recommends preserving the original view and then checking the broader subscription or resource-group list before creating a replacement. Have the alert owner compare the located rule with the recorded identifier and intended purpose. Keep inventory visibility separate from the rule’s enabled state and notification configuration, which require their own inspection.

Verification

Remove the target-type filter and search for the exact rule. If it appears, inspect its scope, state and actions against the runbook. If it remains absent, continue the inventory investigation with that negative result recorded. Retain the filter settings and rule identifier so another operator can reproduce the difference without introducing duplicate alert rules.

Official references

Microsoft Learn: Manage your alert rules.

Primary reference

Review the official source

Manage your alert rules - Azure Monitor | Microsoft Learn · Verified September 17, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE