Azure Load Balancer Activity Spike

Ankit Mehta@Secvyn

•updated Jun 14, 2026•0•0•2

This rule detects a spike in successful Azure Load Balancer operations from a single caller within an hour. A count of 3 or more successful operations from the same caller within a one-hour window will trigger this alert. This could indicate automated activity or unusual configuration changes related to load balancers.