Define alert details
Details is the final step of the alert creation wizard. You reach it after you have defined the query, condition, and notification, so you can name and classify the alert with full context. This page is the field reference for that step.
Name and description
- Name: write the name your responders read under pressure. "High CPU on production payment-service" is more useful than "CPU alert".
- Description (optional): capture what the alert detects, links to runbooks, and the first step the on-call should take.
Name and Description support Tera dynamic templating, so you can insert live values from the alert, such as a label or the triggering value, into the text. Start typing to get autocomplete suggestions for the available fields. For the syntax and available variables, see Dynamic templating.
Labels
Labels help you filter alerts in Incidents and organize views. Create a new label or select an existing one. Use the key:value format to nest a label, for example env:prod.
To classify an alert as an APM alert, use labels related to service or database catalogs:
Service Catalog alerts
product:apm-service-catalogserviceName:<service name>
Database Monitoring alerts
product:apm-db-catalogapm-db-catalog.databaseName:<db.system>.<db.namespace>
For more information, see Monitoring with alerts.
To designate an alert as a security alert, select the Set as security alert option or use the label alert_type:securitycheck.
Case settings
When Group by is set in the Condition step, decide how matching combinations open Cases:
- Combined case: one case that aggregates all values meeting the condition. Best for fleet-wide symptoms.
- Separate cases: one case per combination. Best when each entity owns its own remediation.
Alert scheduling
Restrict triggering to the days and hours when the alert makes sense, for example business hours only. Leave scheduling off to evaluate the alert continuously.
A schedule can cross midnight: set an end time earlier than the start time, for example 22:00 to 05:00, and the schedule shows Ends the next day. Schedule times follow your time zone setting (local time or UTC).
Related resources
Next steps
Configure up to five condition rules per alert in Multiple alert conditions.