I have setup a Log search alert in Azure, and would like to have values from the log search included in the Alert email, by using the Details/Advanced options/Custom properties
https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-create-log-alert-rule
Is this possible, I can't figure out how to access the values in the value field. (If it's possible), I can't see that the log search result is included in the payload when the alert is fired.
/Jonas
As per this MS Doc, custom properties in alert rules will not appear in the email template when it is triggered.
Custom properties are added to the payload of the alert, but they don't appear in the email template or in the alert details in the Azure portal.
Few of the dynamic custom property values can be retrieved using the path ({placeholder}) which is clearly detailed in the above given MS Doc. And log alert rules will return results only if it has a one row of result. If it is having multiple rows, it will take the first row and ignore the remaining fields.
Note: According to this MS Doc for Log search alerts, you can use a JSON schema payload while creating an alert, but it only supports when that log search alert supports the common schema type.
In order to receive a complete query results information based on your requirement, you can use a logic app with the corresponding action to trigger an alert as detailed in this MS Doc.