Error 'The request had some invalid properties' while setting up alert rule in Azure

Hi Bharath Reddy V

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Check if TimeGenerated is a valid column in Syslog_CL. If it has a different name, you'll need to update your query accordingly.

Sometimes, alerts require more context than just a count. Modify your query to include additional fields or context if necessary:

Syslog_CL

| where TimeGenerated >= ago(2m)

| summarize Count = count() by bin(TimeGenerated, 1m)

This modification bins the counts by minute, which can provide more structured data for alerts.

Make sure you’ve selected the correct workspace and have the necessary permissions to set up alerts. Also, verify that all required fields in the alert configuration are completed correctly.

If the issue continues, make sure your account has the right permissions to create alerts in the Log Analytics workspace, such as the Log Analytics Contributor role.
If you have any further queries, do let us know.

If the answer is helpful, please click "Accept Answer" and "Upvote it".