Alerts

Responding to Alerts from within the LogicMonitor Interface

Introduction to Responding to Alerts from within the LogicMonitor Interface

As discussed in Responding to native SMS alert notifications and Responding to email/SMS email alert notifications respectively, you can respond to alert notifications by replying to the text or email alert notifications themselves. Additionally, as discussed in this article, you can respond to alert notifications from within the LogicMonitor interface, from one of two locations:

  • From the Alerts page
  • From the Resources page

Note: for guidelines on the appropriate use of each response type (i.e. acknowledge, SDT, escalate), see Guidelines for Responding to Alert Notifications.

Responding to Alerts from the Alerts Page

The Alerts page displays all active alerts for your LogicMonitor account.

As discussed in Alerts Page Overview, the Alerts page performs many functions, including the ability to respond to an alert by acknowledging it, putting it into scheduled down time (SDT), or escalating it.

Acknowledging an Alert

Alerts can be acknowledged in one of two ways from the Alerts page:

  • To acknowledge a single alert only, click anywhere within its alert row in the alert table summary to open its detail view. Then, click the Acknowledge button located in the bottom right corner of the detail view.
  • To acknowledge one or more alerts, select the checkbox located in the far left column for each alert you'd like to acknowledge. Then, click the Acknowledge button located at the top of the column.

Using either method, you'll be required to enter acknowledgment notes, as well as have the option to put the instance causing the alert into scheduled down time (SDT). Putting an alert in SDT is discussed in the next section.

Putting an Alert in SDT

Configuring scheduled down time (SDT) for the device, cloud resource, or website (or an underlying instance) that is triggering alerts suppresses the alert notifications for the time period specified. To be clear, alerts will still display within LogicMonitor for resources in SDT, but no alert notifications will be routed.

As discussed in the previous section, one or more instances can simultaneously be put into SDT as part of the acknowledgment process. But for a little more functionality, the Alerts page also features a per-alert SDT button that allows you to put the instance's parent device, website, or cloud resource into SDT (not just the instance), as well as set a more granular time duration. As shown next, this button is found on an alert's detail view, which is available by clicking anywhere on the alert row in the alert table summary.

Note: SDT can also be scheduled in advance (and optionally on a recurring basis) for proactive suppression of unwanted alert notifications. For more information on the full SDT functionality supported by LogicMonitor, see Scheduled Down Time (SDT) Tab or, if scheduling SDT for a website rather than a device or cloud resource, see Website SDTs.

Escalating an Alert

Alerts can be manually escalated to the next level of their assigned escalation chains from the Alerts page by clicking the Escalate button in the lower right corner of the detail view. You should escalate an alert if an SDT isn't appropriate and you either can't identify/resolve the underlying cause of the issue or don't have the time to identify/resolve it. Note that even if the escalation interval for the matching alert rule is set to zero, the alert will still escalate. For more information on escalation chains, see Escalation Chains.

Responding to Alerts from the Resources or Websites Page

Alerts can also be responded to by navigating to the device, cloud resource, or website that is generating the alert and opening its Alert tab. The Alert tab that displays for individual monitored entities (or their parent groups) has identical functioning to the Alerts page described in the previous section.