Alert Settings

When you configure an alert, there are several different settings to consider in order to receive the optimum and most efficient alerts.

Trigger Notification Settings

For Pattern Match Alerts, an alert triggers every time the event occurs on a rolling basis by default. If you choose Custom Match Settings, you can specify how many times an event must occur within a given time frame before it can trigger an alert.

For example, if the pattern match threshold is 100 times in the throttle window of 60 minutes, 100 alerts must occur within the next hour before you receive the first alert. Similarly, 100 more alerts must occur in the same hour before you receive a second alert.

Note that when the pattern is matched, an alert will be triggered. However, if that pattern is continually matched above the Match threshold, you will not get any further alerts until it falls below the threshold that you've set. If you want to be alerted on every time the pattern occurs, set the alert to Match Once.

For Change Detection alerts, new queries require that you specify a calculation to use, and a key to apply the calculation. Any changes of the key based off of the calculation will trigger an alert.

Notification Settings

For Change Detection and Inactivity Detection alerts, define one or more communication methods. You can choose PagerDuty, Slack, Webhook, and email. Select existing recipients or create new ones and provide the appropriate details for the communication method.

If you are using email, select existing recipients from the dropdown or create new ones. Use commas to separate email addresses if you are sending to multiple recipients. See Third Party Integrations for more information.

For Pattern Detection alerts, use labels to identify the logs in your notifications. You can create a new label, or use an existing one by searching for labels, filtering by severity, or sorting them alphabetically.

Create New Email Recipients

When you using email to send alerts to your team, you can create a new email recipient.

  1. From the "Recipients" dropdown, click on Add & select recipient.
  1. Name the recipient, and then enter one or more email addresses separated by commas.
  1. Optionally check the box to include other entries logged when the alert was generated.
  2. Click the Add & select recipient button.

The new email will populate the Recipients field.