You can change the trigger of alert queries, enable or disable the notifications that a query sends, or change the notification method (email, webhook, or send to vRealize Operations Manager.
About this task
Alert queries are user specific. You can manage only your own alerts.
Content pack alert queries are read-only. To save changes to a content pack alert, you have to save the alert to your custom content.
You can apply your changes to one or more alerts at the same time.
Verify that you are logged in to the vRealize Log Insight Web user interface. The URL format is https://log_insight-host, where log_insight-host is the IP address or host name of the vRealize Log Insight virtual appliance.
Verify that an administrator has configured SMTP to enable email notifications. See Configure the SMTP Server for Log Insight.
Verify that an administrator has configured the connection between vRealize Log Insight and vRealize Operations Manager to enable alert integration. See Configure Log Insight to Send Notification Events to vRealize Operations Manager.
If you are using webhooks, verify that a webserver has been configured to receive webhook notifications.
- Navigate to the Interactive Analytics tab.
- From the Create or manage alerts menu on the right of the Search button, click and select Manage Alerts.
- In the Alerts list, select one or more alert query that you want to modify, and change the query parameters as needed.
You can find queries by entering a string as a filter. Queries are labeled as enabled or disabled and whether they are a Content Pack query.Note:
If you deselect all notification options, the alert query is disabled.
- Save your changes.
This button appears when you modify your own alerts.
Save to My Alerts
This button appears when you modify a shared alert or a content pack alert. The original alert remains unchanged, but you save a copy of the alert to your custom content.