create an alert from log data

[sushree]

we have the datalogs on-boarded into grail , I want to create an alert using the logs fields value . I have created a processing rule and extracted 2 fields-

---  expiration days 

----- Healthstate 

so i want to create an alert for the healthstate = false , whenever it comes false , an alert should have been triggered . 

so after creating processing rule what should be the steps to create an alert , Please let me know .

[LukeHearth · Accepted solution]

Hello @sushree ,

You may not need to extract the value at all you can use a DQL Matcher in the Log Monitoing > Metrics Extraction ro look for the content where the health state is equal to false and count the number of times that this condition appears below is an example:

You can then using the example above create a metric event / custom problem based off of that , that sends an alert when the metric at any point in time is above 0.

Let me know if i need to explain this in a better way. I hope this helps.

Yours,

luke Hearth

[guoguoyun]

Hi@LukeHearth, i had added the log metric  ,and I was preparing to put the metrics into the metrics event, but this error occurred in the configuration.(https://docs.dynatrace.com/docs/observe-and-explore/logs/lma-analysis/lma-log-metrics).
Btw, If I want to configure an alarm so that the alarm channel goes to slack, what should I do next?

[PacoPorro · Accepted solution]

Use the dataexplorer to query the metric.
Change to avanced mode.
Copy the metric selector
In the metric event change from Metric Key to metric selector.
Use the previous metric selector.

[guoguoyun]

It was a useful help, solved ，thanks