Coralogix Flow Alerts provide a revolutionary data monitoring and analysis approach, allowing you to harness the power of logs, metrics, traces, and security in a single, streamlined platform. They not only notify you of a problem in your system but also allow you to understand its cause and how to prevent it in the future.
A Flow Alert is designed to notify you when any combination of alert events occurs in a specific sequence within a defined timeframe.
For example, to be notified of an increase in HTTP error rate caused by high CPU utilization, a Flow Alert should be configured to trigger when a high CPU utilization alert is followed by a high HTTP error rate alert within a defined timeframe.
Here are some significant benefits of using Flow Alerts:
Coralogix provides the Flow Builder tool to visually combine, and then chain together, the user-defined alerts that will trigger a Flow Alert. The basic building blocks of the Flow Alert are stages and groups.
A group represents a logical combination of individual user-defined alerts. The group supports OR, AND, and NOT logical operators to combine multiple individual alerts.
A stage represents alert groups that need to trigger within a specified timeframe. Multiple groups can be present in a stage.
As you define a flow alert, consider the following constraints:
STEP 1. Create a new alert. Enter the Alert Name, Description, and Severity.
STEP 2. Select the Alert type: Flow Alert.
STEP 3. Define the Alert Flow by clicking Open Flow Builder.
STEP 4. Drag and drop existing alerts from the left-hand panel into the Flow Builder workspace area. To view a tool-tip with the details for each alert, hover over the alert. These details include the Query, Conditions, and Group By fields.
STEP 5. Organize the alerts into groups and stages as explained above. Remember to set a timeframe for each stage.
STEP 6. Click Apply to save the Alert Flow.
STEP 7. Select the Group By keys.
Note that the available keys will be the intersection group between the different alerts. For example, if Alert A is grouped by
Region
and byCluster
, and Alert B is grouped byRegion
and byPod
, the Alert Flow will only be able to be grouped byRegion
, and not byCluster
orPod
, as that is the only Group by option available to both alerts in the flow. You can see which Group by options are available for each alert in the Alert Builder by hovering over the alert and viewing the Alert Description.
STEP 8. Define the Notification settings.
In the notification settings, you have different options, depending on whether or not you are using the Group By condition.
When using Group By conditions, you will see the following options:
When not using the Group By condition, a single alert will be triggered and sent to your Incidents Screen when the query meets the condition.
You can define additional alert recipient(s) and notification channels in both cases by clicking + ADD WEBHOOK. Once you add a webhook, you can choose the parameters of your notification:
STEP 9. Create an Alert Schedule.
STEP 10. Create Notification Content for the Flow Alert.
STEP 11. Click Create Alert.
Our Incidents Screen displays all of your triggered alert events within the Coralogix platform. View all those events that are currently triggered or those triggered within a specific time frame. With easy-to-use functionalities and the ability to drill down into events of interest, the feature ensures top-notch monitoring and analysis.
The following example notifies you when successful orders are reduced due to a failed database cleanup task that occurred 24 hours earlier.
Need help?
Our world-class customer success team is available 24/7 to walk you through your setup and answer any questions that may come up.
Feel free to reach out to us via our in-app chat or by sending us an email at [email protected].