Flow Alert

A Flow Alert is designed to notify when any combination of alert events occurs in a specific sequence within a defined timeframe.

For example, to be notified when an increase in HTTP error rate is caused by high CPU utilization, you would configure a Flow Alert to trigger when a ‘High CPU utilization’ alert is followed by a ‘High HTTP error rate’ alert within 10 minutes.

Concepts

Coralogix provides the Flow Builder tool to visually combine, and then chain together, the user-defined alerts that will trigger a Flow Alert. The basic building blocks of the Flow Alert are Stages and Groups.

A Group represents a logical combination of individual User-defined alerts. The Group supports OR, AND, and NOT logical operators to combine multiple individual alerts.

A Stage represents alert groups that need to trigger within a specified timeframe. Multiple Groups can be present in a stage.

Limitations

As you define a flow alert, it is important to consider the following constraints:

1. The Flow Alert must have a minimum of 2 stages.
2. The first stage of a flow alert can only contain 1 group.
3. The first stage of a flow will always have a timeframe of 00:00:00
4. The duration of the timeframe in all stages cannot exceed 36 hours.
5. You can combine a maximum of 30 alerts into a single Flow alert.
6. The following alert types do not support the NOT logical operator:
   • New Value alerts
   • Unique Count alerts
   • Notify immediately Standard alerts

Create a Flow Alert

The steps to create a flow alert are as follows:

1. Create a new alert. Enter the Alert Name, Description, and Severity

2. Select the Alert type ‘Flow Alert’

3. Define the Alert Flow by clicking on ‘Open Flow Builder’

4. Drag and Drop existing alerts from the left panel into the Flow Builder workspace area.
5. Organize the alerts into Groups and Stages as explained in the Flow Alert concepts. Remember to set a timeframe for each stage.

5. Click ‘Apply’ to save the Alert Flow.
6. Define the Email/Webhook recipients, Alert schedule and Notification Content for the Flow Alert.
7. Click on ‘Create Alert’. That’s it!

Alert Notifications and Insights

Notifications

Coralogix supports many built-in webhooks including Slack, PagerDuty, OpsGenie. To learn more about configuring webhooks, please refer to our Coralogix webhooks tutorial.

The Flow Alert sends a notification to the webhook attached to it. Each individual alert in the Flow Alert also sends notifications to its respective webhook.

Here is an example of a slack notification from a Flow Alert:

Insights

The insights from a flow alert will show you:

1. The individual user-defined alerts triggered the flow alert. Greyed-out boxes represent alerts that did not trigger.
2. Insight graphs, tables or logs for each of the individual alerts that triggered the Flow Alert.

More examples

Here are some more examples to show the utility of the Flow Alert.

1. This Flow Alert will notifiy you when successful orders reduce because of a failed database cleanup task 24 Hours earlier.

For any questions, please don’t hesitate to reach out via our in-app chat. We are here to help!