topic Is there a way to automatically tag log events? in Alerting

Is there a way to automatically tag log events?

Yosi_Neuman — Mon, 22 Aug 2022 14:19:15 GMT

Hi guys,

The customer created a log event and now asks to add it to Alerting Profile with tags, but we didn't find the right way how to add the automatic tag with entitySelector for this log event.

Can someone please help with the entitySelector here?

Thanks in advance for your input here

Yos

Re: Is there a way to automatically tag log events?

mark_bley — Wed, 31 Aug 2022 22:06:11 GMT

Hi @Yosi_Neuman

you can filter by custom Title or description in the Alerting profile, this way you can make sure specific Log event titles are taken care of

Other than that the log events will be tied to the underlying entity, i.e. either a Host or a Process, if you want to filter with tags you can try using the specific tags of these.

Best,

Mark

Re: Is there a way to automatically tag log events?

Yosi_Neuman — Thu, 01 Sep 2022 05:25:17 GMT

Hi @mark_bley

Question here is how to add log events to existing AP which collect events by tags.

Hence your first part of the answer will not help in this case

However your second part of the answer is perfect, and we will share this information with our customers.

Thanks

Yos

Thnkas