Event Notification Format
Common Alert Template
The common template can be applied in most cases. It allows you to receive alerts in a consistent format across various environments.
- Product Type: Application, Database, Kubernetes
- Event Type: Application Alerts, Database Alerts, Metrics Alerts
- Event Channel: SMS, Mobile, 3rd-party plugins, Plugins
Event Title
Event title format
[Level][Platform][ProjectName][ApplicationName][EventTitle]
Event title example
[Info][JAVA][Application Project][TC-0-1-8081][CRITICAL_HIGH_MEMORY]
Note
If ApplicationName is not set, it is omitted from the event title.
- Platform is displayed as one of the following.
- JAVA
- NODEJS
- PYTHON
- PHP
- DOTNET
- GO
- POSTGRESQL
- ORACLE
- MYSQL
- MSSQL
- BSM_JAVA
- CLOUDWATCH
- TIBERO
- KUBERNETES
- KUBE_NS
- URLCHECK
- URLCHECK_ADMIN
- CUBRID
- ALTIBASE
- CLUSTER
- REDIS
- MONGODB
- VR
- RUM
Event Message
This section describes the information that can be included in the event message. If optional is set to false, the item is always included in the message. If optional is set to true, the item is displayed only when the data is available.
Event message example
Project Name : Application Project
Project Code : 3
Agent Name : TC-0-1-8081
Message : RECOVERED: Memory is too high. less than 10%
Event Time : 2022-04-12 18:53:24 +0900
Event OFF Time : 2022-04-12 18:53:24 +0900
Alert Type : APPLICATION_MEMORY
Metric Name : memory
Metric Value : 20
Metric Threshold : 10
Stateful : true
Table | Event Message Components
| En | Ko | Supported Alert Types | Description |
|---|---|---|---|
| Project Name | Project name | All | - |
| Project Code | Project code | All | - |
| Agent Name | Agent name | All (optional) | oname |
| Message | Event message | All | - |
| Alert Type | Alert type | All | See the AlertType table below |
| Event Time | Event occurrence time | All | In 2022-04-13 10:40:49 +0900, +0900 indicates the GMT offset |
| Event Off Time | Event recovery time | All (optional) | In 2022-04-13 10:40:49 +0900, +0900 indicates the GMT offset |
| Metric Name | Metric name | All (optional) | Name of the metric used to evaluate the event condition |
| Metric Value | Metric value | All (optional) | Included when the metric value exceeds the threshold |
| Metric Threshold | Metric threshold | All (optional) | Threshold value used to determine the event condition |
| Stateful | Recovered-event notification | All (optional) | true if recovered-event notification is enabled; otherwise false |
| Event Rule | Event trigger condition | Metrics alerts | - |
| Target Filter | Event target filter | Metrics alerts | Evaluates event conditions only for metrics collected from specific targets |
| Repeat Count | Event repeat count | Metrics alerts | The event is triggered when the condition is met the specified number of times within the repeat duration |
| Repeat Duration | Event repeat duration | Metrics alerts | Time window used to evaluate the repeat count |
| Receiver | Receiver | Metrics alerts | - |
| Query | MXQL query | Composite metrics alerts | - |
| Rule | Event trigger condition | Composite metrics alerts | - |
| Query Period | Query period | Composite metrics alerts | - |
| Query Interval | Query interval | Composite metrics alerts | - |
| Silent Time | Silent time | Composite metrics alerts | - |
| Query | URL | Exception alerts | URL of the request that caused the exception |
| TXID | Transaction ID | Exception alerts | - |
| Class | Error class name | Exception alerts | - |
| Log Message | Log message | Server – file log alerts | - |
| Log File | Log file path | Server – file log alerts | - |
| IP | IP address | All server alerts | - |
| CPU | CPU usage | All server alerts | Snapshot at the time the event occurred |
| CPU_load1 | CPU load (1 min) | All server alerts | Snapshot at the time the event occurred |
| CPU_loadPerCore | CPU load per core | All server alerts | Snapshot at the time the event occurred |
| Memory | Memory usage | All server alerts | Snapshot at the time the event occurred |
| Swap | Swap usage | All server alerts | Snapshot at the time the event occurred |
| Disk Name | Used Percent | Free Size | IO Percent | Disk performance | All server alerts | Snapshot at the time the event occurred |
| Name | Bps | Pps | Network traffic performance | All server alerts | Snapshot at the time the event occurred |
| Message | Time | Name | Acknowledgement information | All server alerts | - |
Note
This section displays as much information as possible that can be provided for the event.
- AlertType is displayed as one of the following values.
| AlertType | Description |
|---|---|
| APPLICATION_CPU | Application CPU alert |
| APPLICATION_MEMORY | Application memory alert |
| APPLICATION_DISK | Application disk alert |
| APPLICATION_ACTIVE_TRANSACTION | Application active transaction alert |
| APPLICATION_ERROR_TRANSACTION | Application error transaction alert |
| APPLICATION_SLOW_TRANSACTION | Application slow transaction (response time) alert |
| METRICS | Metrics alert |
| COMPOSITE_METRICS | Composite metrics alert |
| ANOMALY | Anomaly detection alert |
| LOG_REALTIME | Real-time log alert |
| COMPOSITE_LOG | Composite log alert |
| SERVER_REBOOT | Server reboot alert |
| SERVER_NO_DATA | Server no-data alert |
| SERVER_PORT | Server port alert |
| SERVER_NETWORK_IOPS | Server network IOPS alert |
| SERVER_NETWORK_BPS | Server network BPS alert |
| SERVER_DISK_IO | Server disk I/O alert |
| SERVER_DISK_QUOTA | Server disk usage alert |
| SERVER_DISK_INODE | Server inode alert |
| SERVER_CPU | Server CPU alert |
| SERVER_MEMORY | Server memory alert |
| SERVER_CPU_STEAL | Server CPU steal alert |
| SERVER_MEMORY_SWAP | Server swap memory alert |
| SERVER_LOG_FILE | Server log file alert |
| SERVER_WINDOW_EVENT | Server Windows event alert |
| SERVER_OFF | Server alert OFF notification |
| SERVER_ACKNOWLEDGE | Server acknowledge notification |
| SERVER_PROCESS_COUNT | Server process count alert |
| SERVER_PROCESS_CPU | Server process CPU alert |
| SERVER_PROCESS_MEMORY | Server process memory alert |
| SERVER_PROCESS_OFF | Server process alert OFF notification |
| AGENT_ACTIVE | Agent activated alert |
| AGENT_INACTIVE | Agent deactivated alert |
| AGENT_REACTIVATED | Agent reactivated alert |
| URL | URL alert |
| TOO_MANY_EVENT | Too many events alert |
| CLOUD_WATCH | CloudWatch alert |
| EXCEPTION | Exception alert |
Application Alert Notifications
Application alerts provide both an Event Title and an Event Message. When using the Additional notifications when the event state is resolved. feature, an Event Off Message is sent when the event trigger condition is cleared.
| Event Type | Event Level | Event Title | Event Message | Event Off Message |
|---|---|---|---|---|
| Server CPU | Warning | HIGH_CPU | CPU is high. ${value}% (>= ${threshold}%) | RECOVERED: CPU is high. less than ${threshold}% |
| Server CPU | Critical | CRITICAL_HIGH_CPU | CPU is too high. ${value}% (>= ${threshold}%) | RECOVERED: CPU is too high. less than ${threshold}% |
| Server Memory | Warning | HIGH_MEMORY | Memory is high. ${value}% (>= ${threshold}%) | RECOVERED: Memory is high. less than ${threshold}% |
| Server Memory | Critical | CRITICAL_HIGH_MEMORY | Memory is too high ${value}% (>= ${threshold}%) | RECOVERED: Memory is too high. less than ${threshold}% |
| Server Disk | Warning | HIGH_DISK | Disk is high ${value}% (>= ${threshold}%) | RECOVERED: Disk id high. less than ${threshold}% |
| Server Disk | Critical | CRITICAL_HIGH_DISK | Disk is too high ${value}% (>= ${threshold}%) | RECOVERED: Disk is too highf. less than ${threshold}% |
| Normal Transactions | Warning | HIGH_ACTIVE_TRANSACTION | Active Transaction Count is over ${value} (>= ${threshold}) | RECOVERED: Active Transaction Count is less than ${threshold} |
| Error Transactions | Warning | HIGH_ERROR_TRANSACTION | Error Transaction Count is over ${threshold} (${value}) | RECOVERED: Error Transaction Count is less than ${threshold} |
| Slow Transactions | Warning | TOO_MANY_SLOW_TX | Too many delayed transactions (${value}, above ${time} ms) | RECOVERED: Too many delayed transactions. less than ${threshold} |