Alert aggregation
You can aggregate your alerts and then display them as a widget on a custom dashboard using a gauge-type metric (cx_alerts). When alert-to-metric is enabled, all alerts start to be accumulated into bucket. The number of triggered/resolved alerts is calculated per minute, creating a time series per every permutation.
Alert definition management
Create, view, filter, and manage all your alert definitions in a single place with real-time status, labels, and quick actions for fast operational control.
Alert drill-down view
Use the Alert Drill-Down view to investigate why an alert fired, explore query logic, trigger conditions, schedules, and live charts to validate and refine alert behavior.
Alert query behavior
Understand how Lucene queries behave differently in real-time alert evaluation compared to the archived data shown in Case and Incident views. Learn which query patterns to avoid and how to write reliable alert queries.
Alert webhook with GCP Chat
Configuring a Google chat webhook with Coralogix can easily be done using a custom webhook integration as shown in this tutorial.
Alert webhook with VictorOps
Create a VictorOps routing key and REST endpoint URL, then add it as an outbound webhook to send Coralogix alerts to VictorOps.
Alerts as a notification source type
This tutorial describes entity types and subtypes for Notification Center.
Alerts map
Alerts Map presents users with a visual representation of each alert status in real-time. Grouping all of your alerts in a scalable, information-dense manner, Coralogix ensures optimal system monitoring.
Anomaly detection alerts
Anomaly detection alerts learn a baseline from your logs and fire when counts deviate from it, so you catch unusual behavior without maintaining static thresholds.
Anomaly detection alerts
Detect metric behavior that deviates from a learned baseline, without defining static thresholds.
AWS EventBridge outbound webhook
Amazon EventBridge serves as a serverless event bus service, facilitating the collection and transmission of data from various applications and services to designated destinations. Employ the AWS EventBridge Outbound Webhook to establish a streamlined real-time mechanism, enabling Coralogix to transmit events to AWS EventBridge.
Configuring an alert definition
Build alert definitions in Coralogix with a guided wizard that takes you from configuration to response to summary, so the context you have already set informs every choice.
Configuring outbound webhook notifications
Outbound Webhooks, or alert webhooks, offer a streamlined way to receive immediate notifications for critical events in the form of alerts, facilitating prompt responses to incidents. This tutorial guides you through configuring your outgoing webhook notification settings and associating each webhook with multiple alerts.
Coralogix reporter
Deploy the Coralogix-Reporter AWS Lambda app to email periodic reports of OpenSearch query results to a mailing list.
Creating alert conditions
When setting up a Coralogix alert condition, you may configure up to five condition rules, each with a threshold, timeframe, and individual priority.
Creating alerting email templates
Build alerting email templates with a Coralogix custom webhook and a Zapier Zap that formats alert details into an email.
Custom evaluation delay
The Custom Evaluation Delay feature helps mitigate false alerts by shifting an alert's evaluation timeframe backward by a configurable amount.
Custom webhooks: metric alerts
Route metric alert notifications to custom outbound webhooks through the alert wizard's Notification step.
Customizing anomaly detection alert sensitivity
Tailor alert sensitivity for both logs and metrics-based anomaly detection alerts.
Dataset alerts
Use dataset alerts to run log-based alerts on any logs-compatible dataset, target system datasets, and keep your alerting aligned with how your data is organized.
Defining alert details
Reference for the Details step of the alert creation wizard: name, description, labels, case settings, and scheduling.
Email group outbound webhooks
Enhance your observability workflows by sending real-time event notifications and log data to an Email group, a pre-defined group of email recipients. With this outbound webhook, you can easily automate responses to critical events, optimizing your organization's incident management and alerting processes.
Flow alerts
Trigger an alert when a defined set of other alerts is in a triggered state across a sequence of time-bound stages.
Generic outbound webhooks (alert webhooks)
Enhance your observability workflows by sending real-time event notifications and log data to any endpoint that accepts HTTP requests. With this generic outbound webhook, you can easily integrate Coralogix with different endpoints, automate responses to critical events, and improve your organization's incident management and alerting processes.
Getting started with alerts
Create your first Coralogix alert: sign up, send data, and configure an alert definition, with an interactive walkthrough of the alert builder.
Immediate notifications
Notify on every matching log as it arrives, with no aggregation window, so you catch one-off events the moment they happen.
Incidents
View, filter, and manage triggered alert events. Drill down into incidents to investigate underlying logs, metrics, and traces.
Introduction to alerts
Detect anomalies, respond to incidents, and reduce mean time to resolution with Coralogix alerts across logs, metrics, and traces.
Jira outbound webhooks
Create Jira issues automatically when Coralogix alerts trigger, using a Jira API token, project key, and a Jira outbound webhook.
Log2Metric alert
Create a metric alert from a numeric log field. Coralogix generates the Events2Metrics configuration and alert, and shows historical values during setup.
Lucene query builder
Create structured log queries without writing raw Lucene syntax. The Lucene Query Builder helps you filter logs by selecting fields, operators, and values from your data.
Metrics-based query
Configure metric-based queries using the Query Builder to define alert conditions, filter data, apply functions, and analyze metric behavior over time.
Microsoft Teams outbound webhooks
Migrate deprecated legacy Microsoft Teams webhooks for Coralogix alerts to workflow-based webhooks or the native Teams connector.
New value alerts
Trigger an alert when a previously unseen value appears in a log field within a time window. Use new value alerts to catch new domains, new error codes, and other first-time occurrences.
No-data handling
Learn how no-data handling controls alert behavior when queries return no results, and how to select the correct no-data strategy for metric and log alerts.
Notification settings
Decide what an alert is for: open a Case, or send a Signal-Based notification routed by label to the right connector and preset.
Opsgenie outbound webhooks
Configure an Opsgenie outbound webhook so Coralogix alerts create and resolve alerts in your Opsgenie service.
PagerDuty outbound webhooks
Configure a PagerDuty outbound webhook so Coralogix alerts trigger and resolve incidents in your PagerDuty service.
Ratio alerts
Calculate the ratio between two log queries and trigger an alert when it crosses a threshold. Use ratio alerts to track error rates, regional traffic share, and denied-request proportions.
Saved views
Save and reuse filtered Alert Management views so you can return to common monitoring workflows without reapplying queries, filters, and table settings each time.
Send log outbound webhooks
Enhance your observability workflows by sending real-time event notifications and log data to Coralogix. With this webhook, you can easily receive logs in Coralogix, automate responses to critical events, and improve your organization's incident management and alerting processes.
Slack outbound webhooks
Enhance your observability workflows by sending real-time event notifications and log data to Slack. With this outbound webhook, you can easily integrate Coralogix with Slack, automate responses to critical events, and improve your organization's incident management and alerting processes.
Suppression rules
Use Suppression Rules to mute alert notifications during scheduled maintenance, testing, auto-scaling events, or outside working hours.
Threshold alerts
Trigger an alert when the count of matching logs crosses a fixed threshold over a time window. Use threshold alerts to catch error spikes, traffic drops, and volume changes.
Threshold alerts
Trigger when a metric crosses a threshold you define over a time window, with control over duration and missing-data behavior.
Time relative alerts
Time relative alerts compare current log counts against the same window in a prior period, so you catch shifts in behavior that a fixed threshold would miss.
Tracing alerts
Alert on spans that exceed a latency threshold across the services and tags you select, using a trace count condition.
Troubleshooting alerts
Diagnose and resolve common alerting issues in Coralogix, including alerts not triggering, delayed notifications, false positives, anomaly detection problems, and suppression rule behavior.
Unique count alerts
Unique count alerts fire on the number of distinct values in a log field, so you can measure the breadth of an issue, such as how many users encountered a 5XX error, not just that it happened.
Verify Alert
Check how an alert definition would have behaved against historical logs before you save it, and understand which data tier Verify Alert queries.
Workflow-based Microsoft Teams outbound webhooks
Enhance your observability workflows by sending real-time event notifications and log data to Microsoft Teams. With this outbound webhook, you can easily integrate Coralogix with Microsoft Teams, automate responses to critical events, and improve your organization's incident management and alerting processes.
Zenduty
Coralogix supports integration with Zenduty.