Reputation: 3336
I would like to create a Datadog Monitor Alert based on the following scenario:
I have two logs that happen at the same time:
@msg:"Processed"
@msg:"Some files not processed"
Well, to my monitor state changes to error it should obey the following condition: Log B MUST exist at least 1 time and Log B MUST NOT exist
.
I didn't find a way to create this condition in Datadog Monitor, I tried with Composite Monitor but the problem with composite is that single alerts are triggered at different times causing false positives to me.
Upvotes: 4
Views: 4566
Reputation: 268
Can you count the occurance of each log line as seperate queries in a Log Monitor and then create a formula to find the difference between them?
Upvotes: 0