For the first step to create the new alert tule, under the Create Alert section, you are going to select your Log Analytics workspace as the resource, since this is a log based alert signal. The log data goes to the analytics workspace and it is from there that the alert is triggered. Reference: https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/configure-azure- monitor