Enabling alerts for incessant logs

[nsreddy]

We are seeing occasionally millions of logs are being injected by one log source in a 24 hour period. We would like to create an alert when any log source writes more than 100k logs in a 24 hour period. I have tried to figure this out with Dynatrace documentation and few forums, but without success. Anyone has done this in the past?

[natanael_mendes · Accepted solution]

Create a Threshold Alert: Once you have the custom log metric, you can set up an alerting profile in Dynatrace to trigger an alert when the metric exceeds 100,000 logs in a 24-hour period. Here's a general outline of the steps:

a. Navigate to the alerting configuration section in your Dynatrace account.

b. Create a new alerting profile or use an existing one.

c. Configure a new alert condition. Choose the custom log metric you created in step 2 and set the threshold to 100,000 logs.

d. Define the alerting criteria, such as the evaluation interval (e.g., every 5 minutes) and the number of consecutive violations required to trigger an alert.

e. Configure alert notifications to be sent to the appropriate teams or individuals when the condition is met.