Tealeaf uses alerts to help you monitor event activities. Notifications about alerts are sent in an email. Alerts are created and monitored by the Alert manager.
Alert notifications are based on:
- Event
- Alert type
- Threshold operator, greater than, less than, or in the range of the Threshold value
- The time between alerts notifications
To learn all about alerts and the alert manager, visit our Alert Manager course in our Acoustic Academy.
Types of alerts
You can create the following types of alerts:
- Average: This alert notification is based on the average of a numeric event value that is collected during the alert interval, based on the threshold value using the threshold operator.
- Count: This alert notification is based on the event count, as compared to the threshold operator and value. Select this option to create an alert that is based on counting a single event.
- Maximum: This alert notification is sent when the numeric event value exceeds the defined maximum during the alert interval, based on the threshold value using the threshold operator.
- Minimum: This alert notification is sent when the numeric event value exceeds the defined minimum during the alert interval, based on the threshold value using the threshold operator.
- Ratio: This alert notification is based on the ratio of two events. You choose two events, one as the denominator and the other as the numerator. The alert notification is sent when the threshold is met. The threshold is set as a percentage.
- Sum: This alert notification is based on the sum of a numeric event value that is collected during the alert interval, based on the threshold value using the threshold operator.
Create an alert
- Select the Alert manager.
- Click + New alert.
- Enter the Alert name.
- Add Tags.
- Select the Application where you want to collect the alert data.
- Select the Alert type.
- Select an event.
- Optional: Click Add dimension and select the dimension name and dimension value.
- Set the Threshold for the alert by selecting a threshold operator and value.
- Set the Threshold is met within by entering a number and setting the time to minutes, hours, or days.
- Click Continue to go to the Recipient information step.
Information about the alert recipient displays. By default, you are the alert recipient. To share this alert with others, add their email address.
- Click Continue.
The blackout information displays.
- Optional: To set a blackout period for the alert, select ON.
- Set a value for Resume alert processing.
- Enter the time range for the blackout period.
- To add another blackout period, click add another blackout.
- Click Create.
The alert is displayed in the Alert manager.
Example
Let's say you create an Alert at 8:00 AM and set Threshold is met within to 10 minutes and Resume alert processing to 5 minutes. In this scenario, the alert is checked every minute after 08:10 AM.
If the Alert is triggered at 08:13 AM, the Alert does nothing between 08:13 AM and 08:18 AM. At 08:18 the Alert resumes processing and is checked every minute after 08:28 AM, as 08:28 AM marks the 10-minute interval.
Update alerts
You can manage your alerts in the Alert Manager by selecting My alerts. Users assigned the Administrator role can manage all Alerts by selecting All alerts. You can also manage Anomaly detection alerts from the Alert Manager.
Regular users can monitor the alerts that they created, and any alert that is shared with them by clicking the alert name to view the alert details. Regular users and the Administrator can also create copies of alerts, change the alert criteria, stop alert notifications, reset alerts, and remove alerts.
The administrator can manage all Alerts across the organization (whether the Alert was shared with them or not), by clicking the alert name to view the alert details.
- You can use existing alerts as templates for new alerts by creating a copy of the alert:
- Select the alert that you want to create a copy of.
- Click Copy.
The duplicated alert displays in the Alert manager with copy of appended to the name.
- You can change the criteria for an Anomaly Detection alert:
- Select the Anomaly Detection Alert tag.
- Select the alert that you want to modify.
- Click Edit.
- Make changes to the alert's Basic information and click Continue.
- Make changes to the alert's Recipient information.
- Click Save.
- You can change the alert criteria only for alerts that you created:
- Select the alert.
- Click Edit.
- Change the alert criteria.
- Click Continue twice.
- Click Save.
- To stop alert notifications from being sent for a specific time, you can add blackout dates:
- Select the alert and click Continue twice.
- For the blackout period, click On.
- Enter the time range for the blackout period.
- To add another blackout period, click add another blackout.
- Click Save.
- If you're an event creator and want to exclude other people within your company from controlling their alert setting, you can turn off alerts so that email notifications are not sent.
- Select the alert.
- In the Active field, select Off.
- Click Continue twice.
- Click Save.
- You can reset the alerts that you created. The alert reset time is the time interval in minutes after the alert was created, during which no other alerts of the same alert type can be created. After the alert reset time expires, the alert counter is reset back to zero.
- Select the alert.
- Update the Alert reset time.
- Click Save.
- If you want an alert to remain active but do not wish to receive notifications, you can set the Watching toggle to off. This will remove alerts from the Alert manager without deleting them.
Note: You can enable/disable alerts that you created or alerts that are shared with you. Deleting an alert removes the alert from your view, from the Alert manager of anyone you shared the alert with, and from the system. Turning a watched alert off turns the alert off from your watched list, but the alert remains in the system.
- Select the alert.
- In the Watching field, select OFF.