Alert Blindspot — Unmonitored Resource Report
بواسطة Katabarwa Labs Inc.
Weekly report of every Azure resource with zero alert rules — find your Azure Monitor blind spots.
The resources you only discover are unmonitored during an outage are the ones nobody set an alert rule on. Azure has no native "which of my production resources have no alerts?" view — the closest first-party feature, Monitoring Coverage, only covers virtual machines and AKS.
Alert Blindspot deploys into your own Azure subscription as a managed application and, every week, reports every production-grade resource that has zero metric or log alert rules pointed at it — a coverage scorecard for your Azure Monitor blind spots.
How it works
A timer-triggered Azure Function runs two Azure Resource Graph queries under a system-assigned managed identity with Reader only. It inventories every resource of a monitorable, production-grade type (SQL databases, storage accounts, App Service sites, Cosmos DB, Key Vaults, Redis, Service Bus, Application Gateways, Front Door/CDN, virtual machines — override per tenant), then computes which are truly covered by an alert rule. Coverage is attributed conservatively and truthfully: a resource counts as covered only when an alert is scoped directly to it, or a multi-resource metric alert of the matching resource type and region covers it.
Why it is safe
Read-only. Metadata only. Nothing leaves your subscription — the weekly scorecard is posted only to a Microsoft Teams webhook you configure, and operational logs go to your own Application Insights. Delete the managed application and every trace is gone.