topic Re: create an alert from log data in Alerting

create an alert from log data

sushree — Thu, 07 Dec 2023 16:44:45 GMT

we have the datalogs on-boarded into grail , I want to create an alert using the logs fields value . I have created a processing rule and extracted 2 fields-

--- expiration days

----- Healthstate

so i want to create an alert for the healthstate = false , whenever it comes false , an alert should have been triggered .

so after creating processing rule what should be the steps to create an alert , Please let me know .

Re: create an alert from log data

LukeHearth — Wed, 03 Jan 2024 16:15:51 GMT

Hello @sushree ,

You may not need to extract the value at all you can use a DQL Matcher in the Log Monitoing > Metrics Extraction ro look for the content where the health state is equal to false and count the number of times that this condition appears below is an example:

You can then using the example above create a metric event / custom problem based off of that , that sends an alert when the metric at any point in time is above 0.

Let me know if i need to explain this in a better way. I hope this helps.

Yours,

luke Hearth

Re: create an alert from log data

guoguoyun — Tue, 30 Jan 2024 07:54:03 GMT

Hi@LukeHearth, i had added the log metric ,and I was preparing to put the metrics into the metrics event, but this error occurred in the configuration.(https://docs.dynatrace.com/docs/observe-and-explore/logs/lma-analysis/lma-log-metrics).
Btw, If I want to configure an alarm so that the alarm channel goes to slack, what should I do next?

Re: create an alert from log data

PacoPorro — Tue, 30 Jan 2024 07:56:34 GMT

Use the dataexplorer to query the metric.
Change to avanced mode.
Copy the metric selector
In the metric event change from Metric Key to metric selector.
Use the previous metric selector.

Re: create an alert from log data

guoguoyun — Wed, 31 Jan 2024 02:36:28 GMT

It was a useful help, solved ，thanks