This article explains the steps needed to subscribe to events published by Azure Resource Notifications - Resources. For detailed information about these events, see Azure Resource Notifications - Resources events.
Create Resources system topic
This section shows you how to create a system topic of type microsoft.resourcenotifications.resources.
Set the account to the Azure subscription where you wish to create the system topic.
az account set -s AZURESUBSCRIPTIONID
Create a system topic of type microsoft.resourcenotifications.resources using the az eventgrid system-topic create command.
az eventgrid system-topic create \
--name SYSTEMTOPICNAME \
--resource-group RESOURCEGROUPNAME \
--source /subscriptions/AZURESUBSCRIPTIONID \
--topic-type microsoft.resourcenotifications.resources \
--location Global
Set the account to the Azure subscription where you wish to create the system topic.
Set-AzContext -Subscription AZURESUBSCRIPTIONID
Create a system topic of type microsoft.resourcenotifications.resources using the New-AzEventGridSystemTopic command.
New-AzEventGridSystemTopic -name SYSTEMTOPICNAME `
-resourcegroup RESOURCEGROUPNAME `
-source /subscriptions/AZURESUBSCRIPTIONID `
-topictype microsoft.resourcenotifications.resources `
-location global
Sign into the Azure portal.
In the search bar, type Event Grid System Topics, and select it from the drop-down list.
On the Event Grid system topics page, select Create on the toolbar.
On the Create Event Grid System Topic page, select Resource Management events for Topic type.
Select the resource group in which you want to create the system topic.
Enter a name for the system topic.
Select Review + create
On the Review + create page, select Create.
On the successful deployment page, select Go to resource to navigate to the page for your system topic. You see the details about your system topic on this page.
Create an event subscription for the above topic using the az eventgrid system-topic event-subscription create command.
The following sample command creates an event subscription for both CreatedOrUpdated and Deleted events. If you don't specify included-event-types, all the event types are included by default.
az eventgrid system-topic event-subscription create \
--name EVENTSUBSCRIPTIONNAME \
--resource-group RESOURCEGROUPNAME \
--system-topic-name SYSTEMTOPICNAME \
--included-event-types Microsoft.ResourceNotifications.Resources.CreatedOrUpdated, Microsoft.ResourceNotifications.Resources.Deleted \
--endpoint /subscriptions/AZURESUBSCRIPTIONID/resourceGroups/RESOURCEGROUPNAME/providers/Microsoft.EventHub/namespaces/MYEVENTHUBSNAMESPACE/eventhubs/MYEVENTHUB \
--endpoint-type eventhub
Create an event subscription for the above topic using the New-AzEventGridSystemTopicEventSubscription command.
The following sample command creates an event subscription for both CreatedOrUpdated and Deleted events. If you don't specify IncludedEventType, all the event types are included by default.
New-AzEventGridSystemTopicEventSubscription -EventSubscriptionName EVENTSUBSCRIPTIONNAME `
-ResourceGroupName RESOURCEGROUPNAME `
-SystemtopicName SYSTEMTOPICNAME `
-IncludedEventType Microsoft.ResourceNotifications.Resources.CreatedOrUpdated, Microsoft.ResourceNotifications.Resources.Deleted `
-Endpoint /subscriptions/AZURESUBSCRIPTIONID/resourceGroups/RESOURCEGROUPNAME/providers/Microsoft.EventHub/namespaces/EVENTHUBSNAMESPACE/eventhubs/EVENTHUB `
-EndpointType eventhub
On the Event Grid System Topic page, select Event Subscription on the toolbar.
Confirm that the Topic Type, Source Resource, and Topic Name are automatically populated.
Enter a name for the event subscription.
For Filter to event types, select the event, for example, CreatedOrUpdated or Deleted.
Select endpoint type.
Configure event handler based no the endpoint type you selected. In the following example, an Azure event hub is selected.
Select the Filters tab to provide subject filtering and advanced filtering. For example, to filter for events from resources in a specific resource group, follow these steps:
Select Enable subject filtering.
In the Subject Filters section, for Subject begins with, provide the value of the resource group in this format: /subscriptions/{subscription-id}/resourceGroups/{resourceGroup-id}.
Then, select Create to create the event subscription.
Delete event subscription and system topic
To delete the event subscription, use the az eventgrid system-topic event-subscription delete command. Here's an example:
az eventgrid system-topic event-subscription delete --name firstEventSubscription --resourcegroup sampletestrg --system-topic-name arnSystemTopicResources
To delete the system topic, use the az eventgrid system-topic delete command. Here's an example:
az eventgrid system-topic delete --name arnSystemTopicResources --resource-group sampletestrg
To delete an event subscription, use the Remove-AzEventGridSystemTopicEventSubscription command. Here's an example:
Remove-AzEventGridSystemTopicEventSubscription -EventSubscriptionName firstEventSubscription -ResourceGroupName sampletestrg -SystemTopicName arnSystemTopicResources
To delete the system topic, use the Remove-AzEventGridSystemTopic command. Here's an example:
Remove-AzEventGridSystemTopic -ResourceGroupName sampletestrg -Name arnSystemTopicResources
- Sign in to the Azure portal.
- In the search bar, type Event Grid System Topics, and press ENTER.
- Select the system topic.
- On the Event Grid System Topic page, select Delete on the toolbar.
Subscribe to create, update, delete notifications for virtual machines in an Azure subscription
This section shows filtering example of subscribing to create, update, and delete notifications for virtual machines in an Azure subscription.
az eventgrid system-topic event-subscription create \
--name firstEventSubscription \
--resource-group sampletestrg \
--system-topic-name arnSystemTopicResources
--included-event-types Microsoft.ResourceNotifications.Resources.CreatedOrUpdated, Microsoft.ResourceNotifications.Resources.Deleted \
--endpoint /subscriptions/000000000-0000-0000-0000-000000000000/resourceGroups/sampletestrg/providers/Microsoft.EventHub/namespaces/testEventHub/eventhubs/ehforsystemtopicresources \
--endpoint-type evenhub \
--advanced-filter data.resourceInfo.type StringEndsWith virtualMachines
New-AzEventGridSystemTopicEventSubscription -EventSubscriptionName firstEventSubscription `
-ResourceGroupName sampletestrg `
-SystemtopicName arnSystemTopicResources `
-IncludedEventType Microsoft.ResourceNotifications.Resources.CreatedOrUpdated, Microsoft.ResourceNotifications.Resources.Deleted `
-Endpoint /subscriptions/000000000-0000-0000-0000-000000000000/resourceGroups/sampletestrg/providers/Microsoft.EventHub/namespaces/testEventHub/eventhubs/ehforsystemtopicresources `
-EndpointType eventhub `
-AdvancedFilter @(@{operator = "StringEndsWith"; key = "data.resourceInfo.type" ; value ="virtualMachines"})
Choose CreatedOrUpdated and Deleted event types.
In the Filters tab of the event subscription, choose the following advanced filters.
Key = "data.resourceInfo.type"
Operator = "StringEndsWith"
Value = "virtualMachines"
Subscribe to VM create, update, and delete notifications by a particular resource group
az eventgrid system-topic event-subscription create \
--name firstEventSubscription \
--resource-group sampletestrg \
--system-topic-name arnSystemTopicResources \
--included-event-types Microsoft.ResourceNotifications.Resources.CreatedOrUpdated, Microsoft.ResourceNotifications.Resources.Deleted \
--endpoint/subscriptions/000000000-0000-0000-0000-0000000000000/resourceGroups/sampletestrg/providers/Microsoft.EventHub/namespaces/testEventHub/eventhubs/ehforsystemtopicresources \
--endpoint-type evenhub \
--subject-begins-with /subscription/{Azure subscription ID}/resourceGroups/<Resource group name>/
--advanced-filter data.resourceInfo.type StringEndsWith virtualMachines
New-AzEventGridSystemTopicEventSubscription -EventSubscriptionName firstEventSubscription `
-ResourceGroupName sampletestrg `
-SystemtopicName arnSystemTopicResources `
-IncludedEventType Microsoft.ResourceNotifications.Resources.CreatedOrUpdated, Microsoft.ResourceNotifications.Resources.Deleted `
-Endpoint /subscriptions/000000000-0000-0000-0000-000000000000/resourceGroups/sampletestrg/providers/Microsoft.EventHub/namespaces/testEventHub/eventhubs/ehforsystemtopicresources `
-EndpointType eventhub -AdvancedFilter @(@{operator = "StringEndsWith"; key = "data.resourceInfo.type" ; value ="virtualMachines"})
In the Filters tab of the event subscription, enable subject filtering, and use the following subject filter:
Subject begins with = /subscriptions/{subscription-id}/resourceGroups/{resourceGroup-id}
Then, choose the following advanced filters.
Key = "data.resourceInfo.type"
Operator = "String ends with"
Value = "virtualMachines"
Subscribe to VM create and update notifications by a particular location within a subscription
az eventgrid system-topic event-subscription create \
--name firstEventSubscription \
--resource-group sampletestrg \
--system-topic-name arnSystemTopicResources \
--included-event-types Microsoft.ResourceNotifications.Resources.CreatedOrUpdated \
--endpoint/subscriptions/000000000-0000-0000-0000-0000000000000/resourceGroups/sampletestrg/providers/Microsoft.EventHub/namespaces/testEventHub/eventhubs/ehforsystemtopicresources \
--endpoint-type evenhub \
--subject-begins-with /subscription/{Azure subscription ID}/resourceGroups/<Resource group name>/
--advanced-filter data.resourceInfo.location StringIn chinanorth
--advanced-filter data.resourceInfo.type StringEndsWith virtualMachines
New-AzEventGridSystemTopicEventSubscription -EventSubscriptionName firstEventSubscription `
-ResourceGroupName sampletestrg `
-SystemtopicName arnSystemTopicResources `
-IncludedEventType Microsoft.ResourceNotifications.Resources.CreatedOrUpdated, Microsoft.ResourceNotifications.Resources.Deleted `
-Endpoint /subscriptions/000000000-0000-0000-0000-000000000000/resourceGroups/sampletestrg/providers/Microsoft.EventHub/namespaces/testEventHub/eventhubs/ehforsystemtopicresources `
-EndpointType eventhub `
-AdvancedFilter @(@{operator = "StringIn"; key = "data.resourceInfo.location"; value ="chinanorth"}, @{operator = "StringEndsWith"; key = "data.resourceInfo.type" ; value ="virtualMachines"})
In the Filters tab of the event subscription, enable subject filtering, and use the following subject filter:
Subject begins with = /subscriptions/{subscription-id}/resourceGroups/{resourceGroup-id}
Then, choose the following advanced filters.
Key = "data.resourceInfo.location",
Operator = "String is in"
Value = "chinanorth"
AND
Key = "data.resourceInfo.type",
Operator = "String ends with"
Value = "virtualMachines"
If you have any questions or feedback on this feature, don't hesitate to reach us at arnsupport@microsoft.com.
To better assist you with specific feedback about a certain event, provide the following information:
- System topic type name
- Approximate timestamp in UTC when the operation was executed
- Base resource ID for which the notification was generated
- Navigate to your resource in Azure portal and select JSON view at the far right corner. Resource ID is the first field on the JSON view page.
- Expected event type
- Operation executed (for example, VM started or stopped, Storage account created etc.)
- Description of issue encountered (for example, VM started and no Microsoft.ResourceNotifications.HealthResources.AvailabilityStatusChanged event generated)
- If possible, provide the correlation ID of operation executed
For event that was delayed or has unexpected content
- System topic type name
- Entire contents of the notification excluding data.resourceInfo.properties
- Description of issue encountered and impacted field values
Ensure that you aren't providing any end user identifiable information while you're sharing this data.
For detailed information about these events, see Azure Resource Notifications - Resources events.
