I have a use case requiring a URL query string to trigger an alert. As part of the API requests, the parameter longrun=1 is being sent.

Created trace analytics monitor with GET type as below

@http.url_details.queryString.longrun:1 resource_name:"GET/myapi/details"").rollup("sum", "@duration").by("resource_name").last("5m") > 300

which is not triggering any alerts.

But as soon as change type to POST as below which is working fine.

@http.url_details.queryString.longrun:1 resource_name:"POST /myapi/details"").rollup("sum", "@duration").by("resource_name").last("5m") > 3000

Using DD with type POST and fetching the end point information in graph and leading to alerts->

with GET: Though we have requests submitted, the query not fetching which inturns not leading to no alerts.