Your Azure subscription includes a Log Analytics workspace that collects security-related performance counters from 100 on-premises Windows servers. You need to create alert rules based on that data. Alerts must support dimensions, be quick to create, and generate a single notification when an alert fires and when it resolves. Which signal type should you use when creating the alerts?

The Metric signal type is correct because it allows you to create alerts based on numerical data, such as performance counters collected by Log Analytics. Metric alerts inherently support dimensions, which are crucial for filtering and grouping data from multiple servers, and they provide stateful alerting (firing once and resolving once). The Activity log signal type is for events related to Azure resource operations, not performance counters. The Application Log signal type is for logs generated by applications, which is different from performance counters. The Audit Log signal type is a specific type of activity log for security and compliance, not for general performance metrics.