Updated at: 2022-12-09 03:49:50
Alert is based on the configuration of rule policies and scene policies, and the latter can make logical combination of multiple rule policies to meet complex alert scenes.
1. Click Alert > Alert Policy > Rule, and click + New to enter the New Rule interface, as follow:

2. In this example to create real-time alert rule, the alert rule is set for 404 errors in apache access event. The configuration parameters are as follows; For all log data with log type of Apache, if the log event with error ID = 404 and Log Tag = apacheaccess occurs more than 2 times in 1 minute, the alert trigger condition is met and an alert record with Low severity is generated;

3. Click Alert > Alert Policy > Scene, and click + New to enter the New Scene interface, as follow: 

4. In the scene alert rule setting page, select real-time alert as the alert type, and select the real-time alert rule with 404 errors in apache access event created in step 2 from the scene rule list. Set the alert execution cycle (Alert Date), and set the alert execution time period (Alert Time) every day.
The scene alert rule in this example is: during the period from 00: 00: 00 on 2020-09-07 to 00: 00: 00 on 2020-09-30, alert monitoring will be performed for log events meeting trigger condition of 404 errors in apache access event from 00: 00: 00 to 23: 59: 59 every day, and alert records will be generated. At the same time, in order to avoid alert storm, only one alert record will be generated for the same alert trigger event within 10 minutes according to the set Alert Suppression time, as follows:

Note: To realize alert mail notification (Email/SMS/WeChat) or alert forwarding (HTTP/Syslog forwarding), you can add trigger configuration. Please refer to the section Rule Policy of AnyRobot User Guide.
5. After completing the configuration of alert rules and starting the execution, you can enter the Alert > Alert Record page to view the generated alert records.
Since the example is Local Upload without real-time data, no alert record is generated. The following is an example of massive platform resource vSphere log event alert record. You can obtain massive platform resource vSphere log through remote aggregation and configure operations according to the above alert rules to realize the following alert record effect. Please refer to and sections
vSphere Data Aggregation and Alert of AnyRobot User Guide.