az monitor activity-log alert show --ids $ids --query 'condition'
