Not getting any log alerts suddenly

[Sisapy09]

what could be the reason if logs alerts not generating, from where to start troubleshooting. 
tried test alert with content matching, not even showing in problems. is there different way to setup monitoring if logs ingest through pipeline ?

[yanezza]

Hi!

When you mention log alerts, I assume you are referring to log events (Gen2). If an event isn't generated, you should first check the following:

1. Source Log Ingestion: Verify that the source log is ingested. You can check this using the Logs app.
2. Matcher Condition: Ensure that the matcher condition is matching. You can also use the Logs app to apply the same filter (switch to DQL mode and paste the matcher condition, adding a | filter pipe).

If the log is ingested and the condition is matched, please open a support ticket.

[Sisapy09 · Accepted solution]

my team migrated from classic pipeline to openpipeline. in new pipeline there were no data extraction conditions, so alerts stopped triggering.

[yanezza]

In openpipeline there is a data extraction step, you can create a business event or a davis event (exactly like the old log event processing step)