In this task, you will deploy a virtual machine that will be used to test monitoring scenarios.

1. Download the \Labfiles\08\mst400-08-vm-template.json lab files to your computer.
2. Sign in to the Azure portal.
3. From the Azure portal, search for and select Deploy a custom template.
4. On the custom deployment page, select Build your own template in the editor.
5. On the edit template page, select Load file.
6. Locate and select the \Labfiles\08\mst400-08-vm-template.json file and select Open.
7. Select Save.
8. Use the following information to complete the custom deployment fields, leaving all other fields with their default values:

   Setting	Value
   Subscription	Your Azure subscription
   Resource group	<yourName>-mst400-F67-rg (select Create new)
   Region	East US
   Username	localadmin
   Password	Provide a complex password
   Vm Name Prefix	<your initials>-mst-F67-vm

9. Select Review + Create, then select Create.
10. Wait for the deployment to finish.
11. Review what resources were deployed. There should be one virtual network with one virtual machine. Screenshot must show your Odl_user account, the deployed resources: one virtual network and one virtual machine in <yourName>-mst400-F67-rg

First let’s configure Azure Monitor for virtual machines (this will be used in the last task).

1. In the portal, search for and select Monitor.
2. Take a minute to review all the insights, detection, triage, and diagnosis tools that are available.
3. Select View in the VM Insights box, and then select Configure Insights.
4. Select your virtual machine, and then Enable (twice).
5. Take the defaults for subscription and data collection rules, then select Configure.
6. It will take a few minutes for the virtual machine agent to install and configure, proceed to the next step.
7. Now, you create an alert for when a virtual machine is deleted. Continue on the Monitor page, select Alerts.
8. Select Alert rule and click + Create.
9. Select the box for the <yourName>-mst400-F67-rg resource group, then select Apply. This alert will apply to any virtual machines in the resource group. Alternatively, you could just specify one particular machine.
10. Select the Condition tab and then select the See all signals link.
11. Search for and select Delete Virtual Machine (Virtual Machines). Notice the other built-in signals. Select Apply.
12. In the Alert logic area (scroll down), review the Event level selections. Leave the default of All selected.
13. Review the Status selections. Leave the default of All selected.
14. If the alert is triggered send an email notification to the operations team. Continue working on your alert. Select Next: Actions, and then select Create action group.

15. On the Basics tab, enter the following values for each setting.

    Setting	Value
    Subscription	your subscription
    Resource group	<yourName>-mst400-F67-rg
    Region	Global (default)
    Action group name	Alert the operations team (must be unique in the resource group)
    Display name	AlertOpsTeam

16. Select Next: Notifications and enter the following values for each setting.

    Setting	Value
    Notification type	Select Email/SMS message/Push/Voice
    Name	VM was deleted

17. Select Email, and in the Email box, enter your email address, and then select OK, then Review + create and then create.

18. Once the action group is created move to the Next: Details tab and enter the following values for each setting.

    Setting	Value
    Alert rule name	VM was deleted
    Alert rule description	A VM in your resource group was deleted

19. Select Review + create to validate your input, then select Create. Screenshot must show your Odl_user account, the created alert rule VM was deleted with its description and the AlertOpsTeam action group

In this task, you trigger the alert and confirm a notification is sent.

1. In the portal, search for and select Virtual machines.
2. Check the box for the <yourName>-mst-F67-vm0 virtual machine.
3. Select Delete from the menu bar.
4. Check the box for Apply force delete. Enter delete to confirm and then select Delete.
5. In the title bar, select the Notifications icon and wait until vm0 is successfully deleted.
6. You should receive a notification email that reads, Important notice: Azure Monitor alert VM was deleted was activated... from azure-noreply@microsoft.com.
7. On the Azure portal resource menu, select Monitor, and then select Alerts in the menu on the left.
8. You should have three verbose alerts that were generated by deleting vm0.

9. Select the name of one of the alerts (For example, VM was deleted). An Alert details pane appears that shows more details about the event. Screenshot must show your Odl_user account, the Alert details pane for the VM was deleted alert with its event details

In this task, you create an alert rule to suppress notifications during a maintenance period.

1. Continue in the Alerts blade, select Alert processing rules and then + Create.
2. Select your resource group, then select Apply.
3. Select Next: Rule settings, then select Suppress notifications.
4. Select Next: Scheduling.
5. By default, the rule works all the time, unless you disable it or configure a schedule. You are going to define a rule to suppress notifications during overnight maintenance. Enter these settings for the scheduling of the alert processing rule:

   Setting	Value
   Apply the rule	At a specific time
   Start	Enter today’s date at 10 pm.
   End	Enter tomorrow’s date at 7 am.
   Time zone	Select the local timezone.

6. Select Next: Details and enter these settings:

   Setting	Value
   Resource group	<yourName>-mst400-F67-rg
   Rule name	Planned Maintenance
   Description	Suppress notifications during planned maintenance.

7. Select Review + create to validate your input, then select Create. Screenshot must show your Odl_user account, the alert processing rule Planned Maintenance with its overnight schedule (10 pm to 7 am) and its description

In this task, you will use Azure Monitor to query the data captured from the virtual machine.

1. In the Azure portal, search for and select Monitor blade, click Logs.
2. If necessary, close the splash screen.
3. Select a scope, your resource group. Select Apply.
4. In the Queries tab, select Virtual machines (left pane).
5. Review the queries that are available. Run (hover over the query) the Count heartbeats query.
6. You should receive a heartbeat count for when the virtual machine was running.
7. Review the query. This query uses the heartbeat table. Screenshot must show your Odl_user account, the Count heartbeats query on the heartbeat table with the heartbeat count results
8. Replace the query with this one, and then click Run. Review the resulting chart.

   InsightsMetrics
   | where TimeGenerated > ago(2h)
   | where Name == "UtilizationPercentage"
   | summarize avg(Val) by bin(TimeGenerated, 5m), Computer //split up by computer
   | render timechart with (title= "<yourName> Chart")

   Screenshot must show your Odl_user account, the InsightsMetrics UtilizationPercentage timechart titled “<yourName> Chart”
9. As you have time, review and run other queries.

Minimum 2-3 sentences each — original thinking, your own words!

1. Describe the main focus of this lab and outline the new skills or concepts you learned during this Azure lab session.
2. What challenges did you encounter during this lab, and how did you overcome them?
3. How do the tasks performed in this lab enhance your understanding of Azure networking?
4. In what ways can you apply the knowledge gained from this lab to real-world scenarios? Please provide specific examples.

Screenshots you attach above and your Task 6 answers appear here. This is exactly what prints/exported as your PDF.

1. All screenshots attached in task order, each with your Odl_user account visible (underlined or highlighted).
2. A brief explanation added for each screenshot.
3. Export the PDF with Print / Save as PDF and upload it to the Blackboard assignment.