topic Re: Log events vs log metrics combined with metric events in Log Analytics

Log events vs log metrics combined with metric events

henk_stobbe — Thu, 12 Jun 2025 11:46:56 GMT

Hello All,

I notice people creating log metrics with metric events, after this they set a threshold of above 0 then please create an event.

Should in general this not be done with a log event, with the same options?

Who has any great insights on this?

KR Henk

Re: Log events vs log metrics combined with metric events

henk_stobbe — Thu, 12 Jun 2025 11:49:20 GMT

Addon it is called a log alert,

https://docs.dynatrace.com/docs/analyze-explore-automate/logs/lma-use-cases/lma-e2e-set-log-alert

Re: Log events vs log metrics combined with metric events

g_kat — Thu, 12 Jun 2025 11:57:57 GMT

Hi,

The main difference in my mind is that with the log metric you can set up a sliding window on the metric event, in case you don't need the alert the first time the log occurs. With a log event you don't get that flexibility.

In the case I want a single log of "0" to generate an alert then I would go for a log event too.

Regards,

George

Re: Log events vs log metrics combined with metric events

StrangerThing — Thu, 12 Jun 2025 13:41:10 GMT

Correct. If you want to alert on a single log entry, log event is the way to go. If you want to run anomaly detection or track logs that happen more frequently over time, log metric with metric event or Davis Anomaly Detector is the way to go.