Alert rules

Rules decide when to notify. Channels decide where.

Open Alert Rules → New alert (or start from a preset: Error spike, Any fatal, Warn burst).

Steps

1. Name it — e.g. "Payment failures".
2. Match logs — build a query (level / kind / env / app / text).
3. When should it fire? — threshold ("at least this many matching logs"). Optionally enable Use a time window and set minutes; off means the current ingest batch only.
4. Who gets notified? — select one or more channels. If the list is empty, add a channel first.
5. Noise control — leave Keep notifying while it lasts off for a single ping until matching stops (recommended). Advanced: Confirmations (hits in a row) and Cooldown minutes.
6. Review the IF / THEN preview → Create alert.

Manage rules

• Toggle rules On / Off from the list.
• Use Manage channels to jump back to destinations.

Back: Notification channels