Modify an Alert

You can view the details of an alert and modify an alert definition. You can also add tags to one or more alerts, deactivate or enable alerts, remove an alert, and add alerts to a dashboard.

Prerequisites

Verify that you are logged in to the VMware Aria Operations for Logs (SaaS) web user interface as an administrator.

Procedure

1. Click the two arrows icon in the upper-left corner of the screen to expand the main menu.
2. Navigate to Alerts > Alert Definitions.
3. Locate one or more alerts that you want to view or modify. You can search for alerts by entering keywords in the search text box or by using the sort or filter functionalities. You can filter alerts by severity, type, origin, and tags.
   Do either of the following:
   • View an alert by clicking the alert name. You can examine alert details such as the query on which the alert is based, the alert definition, the alert instances, and whether the alert is enabled or deactivated.
   • Modify an alert definition. Click the alert name and click the pencil icon in the upper-right corner. Edit the required details and click Save.
   • Enable or deactivate one or more alerts.
     Note: Each alert listed in the Alerts Definitions page displays information about whether it is enabled or deactivated. The toggle button against the alert name is green when the alert is enabled and grey when the alert is deactivated.

     To enable an alert, click the toggle button, or click the three dots icon against the alert name and click Enable. To enable multiple alerts, select the check boxes against the alert names and click Actions > Enable.

     To deactivate an alert indefinitely, click the toggle button. To deactivate an alert for a specific period, click the three dots icon against the alert name and click Disable. To deactivate multiple alerts, select the check boxes against the alert names and click Actions > Disable. Select the period for which you want to deactivate one or more alerts.

     • To deactivate one or more alerts for the next 30 minutes, one hour, and so on, select the relevant option.
     • To deactivate one or more alerts indefinitely, select Forever.
     • To deactivate one or more alerts for a custom period, such as a maintenance window, select Custom Range and define the period. The alerts are deactivated during the period and enabled before and after the period.
   • Add tags to one or more alerts. You can select existing tags or create new tags. Tags help you group alerts according to your requirement.

     To add tags to an alert, click Add tags or the plus icon under the alert name.

     To add tags to multiple alerts, select the check boxes against the alert names and click Actions > Add tags.

     Note: To view all the alert tags and manage them, in the Alert Definitions page, click the three dots icon in the upper-right corner and click Manage Tags. You can create new tags and delete existing tags.
   • Add one or more alerts to a dashboard. Select the check boxes against the alert names and click Actions > Add to Dashboard.
     • For information about adding alerts to a new dashboard, see Create a Dashboard.
     • For information about adding alerts to an existing dashboard, see Add a Widget to a Dashboard.
     A widget based on the selected alerts is added to the dashboard.
   • Remove the alert. Click the three dots icon against the alert name and click Delete.