When creating an alert you may want the alert description and parameters to depend on what actually happened in the alert. For example, which dimension was actually dominant, when did the alert start, etc.
You can apply dynamic variables to the alert name and description, with the following possible variables:
{{dimension}} |
See the Using the {{dimension}} value section. |
{{#tagname}} |
The value of the tags defined for the stream. |
{{open_time}} |
The time the anomaly of the first metric opened. |
{{open_time_epoch}} |
The time the anomaly of the first metric opened (in epoch format) |
{{trigger_time}} |
The time the trigger was sent. |
{{trigger_time_epoch}} |
The time the trigger was sent (in epoch format) |
{{duration}} |
The duration of the anomaly (from the moment it started to the moment the trigger was sent). |
{{delta}} |
The numerical value in the metric value from the baseline. |
{{direction}} |
Whether the change is a spike/drop/anomaly. |
{{impact}} |
The financial impact of the alert. |
{{state}} |
The state of the alert (open/updated/closed). |
Using the {{dimension}} value
To add a dynamic variable to your alert name or description, add a variable using curly brackets - {{variable}} - as per the example below. The example shows the dimension name country used in the Description.
Notes:
- If the alert is pushed for one variable (in the above example, country=US), Anodot replaces the variable with the actual value of the variable (US) in the alert notification.
- If the alert includes two or more variable values, Anodot replaces the variable with multiple values accordingly in the alert notification (US, UK).
- Another use case for alert variables is to build URLs for further exploration based on these parameters, as shown in the following URL:
https://customer.othersystem/goto_view?site={{site}}&host={{host}}&start_time={{open_time}}&end_time={{trigger_time}} - For more details on the business impact of alerts, see Measuring Business Impact.