Monitors

Overview

You can use this document to learn about the Monitors page in the Edge Delta App. 

Concepts

Edge Delta collects and analyzes logs and metrics via the Edge Delta agent to provide valuable insight about the monitored systems.

Monitors are a mechanism to notify you about significant changes in your system.

Monitors expose anomalous behaviors identified with seasonal data, such as: 

• Collective negative sentiment increase in system logs
• Individual negative sentiment increase in individual system events
• Correlated increase in agent signals from different individual source such as negative metrics hitting thresholds
• Anomalies in system-wide monitored metrics

By default, there are 3 monitors defined for each organization that sends notifications to the organization's creator:

• Default Pattern Check Alerts
• Default Pattern Skyline Alerts
• Default Correlated Signal Alerts

Reference

Review the following monitor types.

Pattern Check (Pattern Alert)

This monitor:

• Continuously processes collected event patterns with negative sentiment from multiple sources, and then
• Notifies the anomalies in individual outlying events.

By default, configured agents that collect logs from different sources will send analyzed event patterns to the Edge Delta backend, which will be used by this monitor. 

This monitor does not require any agent configuration to function.

Note

To learn how to create a custom alert monitor, see Patterns.

Pattern Skyline (Skyline Alert)

This monitor type:

• Continuously processes the collected event patterns with negative sentiment from multiple sources, and then
• Notifies the anomalies in different types of events collectively.

By default, configured agents that collect logs from different sources will send analyzed event patterns to the Edge Delta backend, which will be used by this monitor.

This monitor does not require any agent configuration to function.

Note

To learn how to create a custom alert monitor, see Patterns.

Correlated Signal Alerts

This monitor: 

• Continuously processes collected event patterns with negative sentiment from multiple sources, and then
• Notifies the anomalies in individual outlying events.

In other words, if an usually high number of anomalies is detected, then a Correltated-Signal event will generate. 

You can create this alert type in the Insights page. 

Custom Metrics

This monitor processes the cumulative value of a specific metric within a configured scope. 

Instead of signals, this monitor processes actual metrics to define a scope-wide threshold with control. 

While this monitor can be managed in the Monitors page, you can only create this monitor in the Metrics page. 

Note

To learn how to create a custom metric, see Metrics.

Instructions

Update an Existing Monitor

Note

To create a custom alert monitor, navigate to the Patterns page of the Edge Delta App, and then click Skyline Alert or Pattern Alert. 

• To learn how to create a custom alert monitor, see Patterns.

Note

To create a custom metrics monitors, navigate to the Metrics page of the Edge Delta App.

• To learn how to create a custom metric, see Metrics.

1. In the Edge Delta App, on the left-side navigation, click Observability, and then click Monitors. 
2. Locate the desired monitor, then under Actions, click the vertical ellipses, and then click Edit. 
3. Make your changes, and then click Save.