You have an Azure subscription that contains an Azure Synapse workspace named WS1 and an Azure Monitor action group named Group1. WS1 has a dedicated SQL pool.
You plan to archive monitoring data for integration activity runs.
You need to ensure that you can configure custom alerts based on the archived data that will execute Group1. The solution must minimize administrative effort.
Which diagnostic setting should you select?
To configure custom alerts based on archived monitoring data and have them execute an Azure Monitor action group, the best approach is to send the data to a Log Analytics workspace. This minimizes administrative effort by centralizing data collection and leveraging built-in alerting capabilities of Azure Monitor. By sending data to Log Analytics, you can create and manage custom queries and alerts more efficiently.
Correct
no doubt A
Send to Log Analytics workspace
https://learn.microsoft.com/en-us/azure/sentinel/detect-threats-custom