...
Additionally, you need to have alerts assigned with View access (see Assign resources to a role), which will be those you will see on the list.
...
Time range: it starts with the eventdate registered in the triggered alert's extraData (adapted to your timezone) and concludes after the period specified in the alert definition settings.
Events shown: all the events that triggered the alert due to exceeding the threshold established in the alert definition settings. If the alert was configured to monitor fields for value counter, the table will be filtered to display only the events with the specific value exceeding the threshold.
Low-type alerts
Time range: it starts with the eventdate registered in the alert's extraData (adapted to your timezone) and concludes after the period specified in the alert definition settings.
Events shown: all the events (or no event at all) that triggered the alert due to not reaching the threshold established in the alert definition settings.
Inactivity-type alerts
Time range: it starts 10 minutes before with the beginning of the inactivity period and concludes 1 minute after the end. These extra minutes enable the visualization of previous events for reference and exclude false positives by considering the triggering delay. The beginning of the inactivity period , which corresponds to the eventdate registered in the triggered alert’s extraData (adapted to your timezone), while its end corresponds to the expiration of the period specified in the alert definition settings.
Events shown: all events occurring during the current period regardless of the key, providing reference for the series of values around the absent value that triggered the alertthe table will be filtered to display only the events with the specific value that stopped showing up and remained absent for the specified period, providing reference for its presence just before disappearing.
| Info |
|---|
Eventdate vs alertdate Bear in mind that the eventdate shown in the table represents the date of the last recorded activity for the missing value, not the date of the triggered alert. The alert is triggered only after verifying that the inactivity period has actually exceeded the specified duration. |
Rolling-type alerts
Time range: it starts with the eventdate registered in the alert extraData (adapted to your timezone) and concludes after the backperiod specified in the alert settings.
Events shown: the event group that triggered the alert.
...
Time range: it starts with the eventdate registered in the alert's extraData (adapted to your timezone) and concludes after the period specified in the query grouping.
Events shown: the table will be filtered to show only the event group with the value combination that triggered the alert due to a greater the variation in its aggregation value, which shifted more than the specified threshold specified in the alert definition settings, as compared from the previous to the previous current period.
| Info |
|---|
Multiple alerts If multiple alerts are triggered during the same period, all the event groups in the same period will be displayed together upon accessing any of their queries. |
...