Azure "Log Analytics workspace" alerts are binded to workspace object, instead of the computer set in the dimension


When setting up Azure Alert integration following doc below:

the em_event created by Azure alert is binded to the workspace object, instead of the the computer in the dimension

Steps to Reproduce

In Azure Portal:
(This is for "Log Analytics workspaces"):

-Under: Workspace Data Sources > Virtual Machines, open the VM then connect.
-Then under: Agents configuration > Linux performance counters, add Azure OOB counters
-Now open the Alert Rules for this Log Analytics workspaces, edit Condition, and you can pick the Platform type signal, e.g. % Used Memory (Platform)
-Also in the Configure signal logic menu, under: Split by dimensions, make sure computer is picked
-Configure action to send to:
-Save the rule

On ServiceNow instance, check em_event table, confirm event is bounded to the "Log Analytics workspace" object, instead of the computer.


There is no known workaround for this issue. If you are able to upgrade, review the "Intended Fix Version" section below below to determine the versions that have a permanent fix.

Related Problem: PRB1497851