LogAlert Groups and LogAlerts Management

LogAlerts help you identify log events that require attention by generating alerts when configured conditions are met. LogAlert Groups organize related LogAlerts and define the log events that the LogAlerts evaluate.

The LogAlert Groups & LogAlerts tab, available on the Logs Management page, provides a consolidated view for managing LogAlert Groups and LogAlerts in your LogicMonitor portal. You can view, filter, add, edit, and delete LogAlert Groups and LogAlerts without navigating to separate management pages. You can also expand rows to view additional information and manage related items.

The actions available on the LogAlert Groups & LogAlerts page depend on your assigned role-based access control permissions.

Requirements for Managing LogAlert Groups and LogAlerts

To manage LogAlert Groups and LogAlerts, you need the following:

• Access to LM Logs in your LogicMonitor portal.
• A LogicMonitor user account with the required permissions to manage LogAlert Groups and LogAlerts.
• An existing LogAlert Group before you can add a LogAlert.

For more information about LogicMonitor roles and permissions, see Logs & Traces Role Permissions.

Managing LogAlert Groups

The LogAlert Groups table displays the LogAlert Groups configured in your LogicMonitor portal. You can filter the displayed LogAlert Groups and customize the table columns to focus on the information that you need.

Expand a LogAlert Group row to view its associated LogAlerts and additional information without leaving the LogAlert Groups & LogAlerts page.

You can filter LogAlert Groups by name and partition. The table updates to display the LogAlert Groups that match the specified filter criteria. Filtering the table does not modify the LogAlert Group configuration.

Additionally, you can use Column Settings to customize the information displayed in the LogAlerts table. You can show or hide available columns and change their order. Select reset to restore the column settings.

You can perform the following actions for LogAlert Groups:

• Add a LogAlert Group.
• Edit an existing LogAlert Group.
• Delete a LogAlert Group.
• Expand a LogAlert Group to view its associated LogAlerts.

For information about LogAlert Group configuration, see LogAlert Groups.

Adding a LogAlert Group

1. In LogicMonitor, navigate to Logs > More Options > Logs Management > LogAlert Groups & LogAlerts.
2. On the LogAlert Groups & LogAlerts page, select Add LogAlert group.
   The Add LogAlert Group panel displays.
3. Configure the LogAlert Group. For more information about the LogAlert Group configuration settings, see LogAlert Groups.
4. Use the following tabs to review contextual information while configuring the LogAlert:
   • Preview—Review the LogAlert results.
   • History—Review the modification history for the LogAlert.

5. Select Save.
   

The LogAlert Group is added to the LogAlert Groups table.

Editing a LogAlert Group

1. In LogicMonitor, navigate to Logs > More Options > Logs Management > LogAlert Groups & LogAlerts.
2. On the LogAlert Groups & LogAlerts page, locate the LogAlert Group that you want to edit.
3. Select Edit. The Edit LogAlert Group panel displays.
4. Update the LogAlert Group configuration.
5. Select Save.
   

The updated LogAlert Group information displays in the LogAlert Groups table.

Deleting a LogAlert Group

1. In LogicMonitor, navigate to Logs > More Options > Logs Management > LogAlert Groups & LogAlerts.
2. On the LogAlert Groups & LogAlerts page, locate the LogAlert Group that you want to delete.
3. Select Edit. The Edit LogAlert Group panel displays.
4. Select Delete.
5. Confirm the deletion.
   

The LogAlert Group is deleted.

Managing LogAlerts

The LogAlerts table displays the LogAlerts associated with your LogAlert Groups. You can filter the displayed LogAlerts and customize the table columns to focus on the information that you need.

Expand a LogAlert row to view additional information about the LogAlert without leaving the LogAlert Groups & LogAlerts page.

You can use the filtering options in the LogAlerts table to narrow the displayed LogAlerts. Filter LogAlerts by name, severity, or active status. The table updates to display the LogAlerts that match the specified filter criteria.

Additionally, you can use Column Settings to customize the information displayed in the LogAlerts table. You can show or hide available columns and change their order. Select reset to restore the column settings.

You can perform the following actions for LogAlerts:

• Add a LogAlert.
• Edit an existing LogAlert.
• Delete a LogAlert.
• Expand a LogAlert to view additional information.

Adding a LogAlert

1. In LogicMonitor, navigate to Logs > More Options > Logs Management > LogAlert Groups & LogAlerts.
2. On the LogAlert Groups & LogAlerts page, locate the LogAlert Group where you want to add the LogAlert.
3. Select Add LogAlert. The Add LogAlert panel displays.
4. Configure the LogAlert.
   For more information about LogAlert types and configuration settings, see LogAlert.
5. Use the following tabs to review contextual information while configuring the LogAlert:
   • Preview/Logs—Review the LogAlert results.
   • History—Review the modification history for the LogAlert.

6. Select Save.

The LogAlert is added to the selected LogAlert Group and displays in the LogAlerts table.

Editing a LogAlert

1. In LogicMonitor, navigate to Logs > More Options > Logs Management > LogAlert Groups & LogAlerts.
2. On the LogAlert Groups & LogAlerts page, locate the LogAlert that you want to edit.
3. Select Edit.The Edit LogAlert panel displays.
4. Update the LogAlert configuration.
   For more information about LogAlert types and configuration settings, see LogAlert.
5. Select Save.

The updated LogAlert information displays in the LogAlerts table.

Deleting a LogAlert

1. In LogicMonitor, navigate to Logs > More Options > Logs Management > LogAlert Groups & LogAlerts.
2. On the LogAlert Groups & LogAlerts page, locate the LogAlert that you want to delete.
3. Select Edit.The Edit LogAlert panel displays.
4. Select Delete.
5. Confirm the deletion.

The selected LogAlert is deleted.