Managing presets through the UI
To reuse an alert configuration, a service administrator can configure an alert preset (alert template).
As of 28 March 2024 the IBM Log Analysis and IBM Cloud Activity Tracker services are deprecated and will no longer be supported as of 30 March 2025. Customers will need to migrate to IBM Cloud Logs, which replaces these two services, prior to 30 March 2025. For information about IBM Cloud Logs, see the IBM Cloud Logs documentation.
Creating a preset
Complete the following steps to configure a preset:
- In the web UI, select the Settings icon .
- Select ALERTS.
- Select Add Preset.
- Specify a name for the preset.
- Select the type of alert (Slack, Email, Webhook, or PagerDuty). If you selected the wrong alert type and you want to change it, click Delete Alert Channel.
- Configure the type of alert.
-
Select if you want the alert to be sent when the condition exists (Presence) or does not exist (Absence).
-
Indicate the logging criteria when an alert should be sent. For example, when 100 lines matching in the view are logged in an hour. A graph will help you determine the number of log lines matching your specified criteria.
-
Select if the alert should be sent at the end of the selected period or immediately when the number of lines are logged.
-
Optionally you can specify a Custom schedule with alerting limited to a specified timezone, days of the week, or timeframe. To configure a Custom schedule:
- Select on for Custom schedule.
- Select the Timezone for the log entries.
- Select the days of the week when alerts should be generated.
- Optionally specify a time range for the selected days. A graph will help you determine the number of log entries for the timezone and time range.
-
Depending on the type of alert you will also need to configure additional settings:
Slack: Specify your Webhook URL and the desired Message color.
Email: Specify the Recipients of the email and a Timezone. The timezone defines the timestamp value of each event that is included in the email. To see UTC timestamps, you can select (GMT +00:00) UTC.
PagerDuty: Specify the Service. If required, you will be prompted to connect to PagerDuty.
Webhook: Specify the Method & URL, and the Headers and Body of the
JSON
used to interact with your webhook. You can use Validate JSON to make sure yourJSON
is correct before creating the alert. -
You can click Test to test that your alert configuration is correct.
-
Click Save Alert
-
If you want to create an additional alert channel, click + and follow the prior steps to create additional channels. You can create different channel types, for example, an email and a Slack channel. Or, you can create multiple channels of the same type with different alert criteria.
-
Your preset can now be used by others to setup alerts.
Deleting a preset
You can manage presets through the ALERTS dashboard.
Complete the following steps to delete a preset from the ALERTS dashboard:
- In the web UI, select the Settings icon .
- Select ALERTS.
- Hover the mouse over the Edit button of the preset that you want to delete. The Delete option displays.
- Click Delete.
- Confirm that you want to delete the preset by clicking Yes, delete.
When you delete a preset, any alerts that are defined by using this preset are automatically deleted.