Getting Started

7. Tuning alert thresholds

Your LogicMonitor account comes with default thresholds for most devices, which means that alerts will be triggered right out of the box. You may need to adjust these thresholds to better fit your use case.

You can customize alert thresholds at the device level, the global DataSource level, or the device group level. Changes made at a narrower level will override any changes made at a broader level, with the global DataSource level being the broadest level and the DataSource instance level being the narrowest level.

Tuning thresholds at the global level

To change alert thresholds at the global DataSource level, select the DataSource in your device tree and then select edit global definition:

Tuning thresholds at the global level

 

Remember you can set three thresholds for each datapoint in the DataSource definition—one for each of warning alerts, error alerts, and critical alerts. To change the alert thresholds for a datapoint, select the manage gear icon next to the datapoint name. Any changes made to the DataSource definition will apply to all instances of the DataSource in your account.

Tuning thresholds at the group level

To change alert thresholds for all DataSource instances in a particular device group, navigate to the Alert Tuning tab for that group and select manage threshold for a particular datapoint:

Tuning thresholds at the group level

Tuning thresholds at the device level

Device level thresholds will override both group-level and global-level thresholds. You can set device-level thresholds using the Alert Tuning tab for a particular DataSource or instance depending on whether you are setting the threshold for a multi or single instance DataSource:

Tuning thresholds for single instance DataSources

To change the alert thresholds for one particular instance of a DataSource, instead of for all instances of the DataSource, navigate to the Alert Tuning tab for that DataSource instance and select the manage icon beneath Effective Threshold for a particular datapoint:

Tuning thresholds for single instance datasources

 

In the manage thresholds window you can add new thresholds for this DataSource instance that will override the thresholds inherited from the DataSource definition:

Tuning thresholds for multi-instance DataSources

You can adjust thresholds for multiple instances of a multi-instance DataSource from the Alert Tuning tab for that DataSource:

Tuning thresholds for multi-instance datasources

Example

Consider the following CPU graph. A threshold was set for the CPU Busy Percent datapoint at the instance level (only this DataSource instance gets the threshold), and to avoid an alert for just a spike occurrence the alert trigger interval was set to 4 at the global DataSource level (all CPU Busy Percent datapoints in the account have an alert trigger interval of 4). Then the CPU exceeded the specified threshold for more than four consecutive cycles and an alert was triggered on the fifth cycle:

Example

Demo

The following demonstration shows how to tune alert thresholds at the global and instance levels:

Next steps:

After you've tuned your alert thresholds to best fit your environment, you should add users and roles and then proceed to configure your alert routing to ensure that the right people are notified when an issue occurs.