# Alerts On Logs

Alerts can be configured from log data from the Search Page. if we want to get alerted on a line of log that is of interest, the user can directly create an **alertable** **event** from the log line.

![](https://2948796384-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LmzGprckLqwd5v6bs6m%2Fuploads%2FXuvy2oAURHh8ewpSDc01%2Fimage.png?alt=media\&token=3e310e22-396d-4bc2-9c3b-c8910f209e5f)

On clicking the <img src="https://2948796384-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LmzGprckLqwd5v6bs6m%2F-MEV3mjaG00pQDdfoSl8%2F-MEV4sXpkswOT0A2Ffsi%2FScreen%20Shot%202020-08-11%20at%205.34.40%20PM.png?alt=media&#x26;token=6cd55d2e-3e12-45e3-8974-07af65f317b8" alt="" data-size="original">on the log line, user can open the log2Metric event rule editor. Refer to [Metrics And Custom Indices](https://docs.apica.io/observe/log-management-overview/metrics-and-custom-indices) section on how to configure log2Metrics. Alert Configuration is available on the third section of log2Metrics modal.

### Creating an alertable event

![](https://2948796384-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LmzGprckLqwd5v6bs6m%2Fuploads%2FSFThVM60E47SOns4p9vY%2Fimage.png?alt=media\&token=ec5f9e34-7563-42d2-bcf1-d73661316341)

#### Fields

* **Name**: A name for the alert, should be alphanumeric.
* **Destination**: This is a user-specified selection where the alerts will be delivered. Only [user-defined alert destinations](https://docs.apica.io/integrations/list-of-integrations/alert-destinations) will be available for selection. User can configure alert destinations in the Alert Destinations Section
* **Operation**: One of the comparators: `>` `>=` `<` `<=` `==` `!=` `=~` `!~`
* **Occurrences**: number of times the event must occur, must be a valid number.
* **Period**: time over which the event occurred, e.g, `5m`, `10m`, `1h`, `1d`, `1w`. Period should be greater than `5m` (`300s`) and should be greater than or equal to Refresh schedule.
* **Rearm**: how frequently you will receive notifications when your query meets the Alert criteria and does not change, must be a valid number (seconds) minimum `300` seconds.
* **Refresh Schedule**: how frequently the query needed to be refreshed in seconds, must be a valid number.
* **Until**: select when to stop the alerts. If not selected, the alert will never expire.

All the alert rules created can be accessed on the Active Rules page.

![](https://2948796384-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LmzGprckLqwd5v6bs6m%2Fuploads%2FJJ4yI7ooC2d3SlZhRYXN%2Fimage.png?alt=media\&token=445ac2b7-c2d9-47a3-aede-df277fda9039)

### Viewing Alerts

All the configured alerts are viewable when navigating to the alerts tab. An Individual alerts' configuration can be edited on this page

![](https://2948796384-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LmzGprckLqwd5v6bs6m%2Fuploads%2FmDG7NU8ILb1mC2x40w5n%2Fimage.png?alt=media\&token=bc7237ea-3dec-4078-b066-8c23e9912a01)

Clicking on the configured alert will open up the respective alert page where it can be modified further for e.g. change the alert rearm duration, add additional alert destinations etc.

![](https://2948796384-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LmzGprckLqwd5v6bs6m%2Fuploads%2FR4XrENrjCHen09OoDXcG%2Fimage.png?alt=media\&token=246d2a48-087c-40a0-b4de-9aa36a6c5867)

{% hint style="warning" %}
Apica Ascent includes alerts from its Prometheus alert manager instance that is included with the Apica Ascent install. NOTE that the editing of the Prometheus alert rules cannot be done via the UI and must use alert manager CRD's to change those alert rules.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.apica.io/autonomous-insights/alerts-1.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
