Log events vs log metrics combined with metric events

[henk_stobbe]

Hello All,

I notice people creating log metrics with metric events, after this they set a threshold of above 0 then please create an event.

Should in general this not be done with a log event, with the same options?

Who has any great insights on this?

KR Henk

[henk_stobbe]

Addon it is called a log alert,

https://docs.dynatrace.com/docs/analyze-explore-automate/logs/lma-use-cases/lma-e2e-set-log-alert

[g_kat · Accepted solution]

Hi,

The main difference in my mind is that with the log metric you can set up a sliding window on the metric event, in case you don't need the alert the first time the log occurs. With a log event you don't get that flexibility.

In the case I want a single log of "0" to generate an alert then I would go for a log event too.

Regards,

George

[StrangerThing]

Correct. If you want to alert on a single log entry, log event is the way to go. If you want to run anomaly detection or track logs that happen more frequently over time, log metric with metric event or Davis Anomaly Detector is the way to go.