<p class="shortdesc">This article describes how to create an alarm rule.</p> <section class="section prereq" id="Create_Alarm__prereq_h1y_kf1_xmb"><div class="tasklabel"><h2 class="doc-tairway">Before you begin</h2></div> <ol class="ol" id="Create_Alarm__ol_z1r_fxl_wnb"> <li class="li">You have successfully collected logs.</li> <li class="li">The log collection device that you configured has incremental logs.</li> <li class="li">You have a Ping An mailbox.</li> </ol> </section> <section class="section context"><div class="tasklabel"><h2 class="doc-tairway">About this task</h2></div> <p class="p">Log Service monitors collected logs. You can create alarm rules to facilitate operations and maintenance .</p> <p class="p">By analyzing and counting the logs that match alarm rules, Log Service can detect exceptions from massive log data within a second based on the user-defined alarm detection period and thresholds. When an alarm is triggered, the system will send out an alarm notification by email.</p> </section> <section class="section limitation" id="Create_Alarm__o1p_3f1_xmb"><div class="tasklabel"><h2 class="doc-tairway">Limitation</h2></div> <p class="p">Alarm notification emails is sent only to Ping An mailboxes. </p> </section> <section><div class="tasklabel"><h2 class="doc-tairway">Procedure</h2></div><ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd"> Log in to the<a class="xref" href="/console/logcloud/indexed/list" target="_blank">Log Service Console</a>。</span> </li><li class="li step stepexpand"> <span class="ph cmd">In the left navigation pane, click <span class="ph uicontrol">Alarm Management.</span></span> </li><li class="li step stepexpand"> <span class="ph cmd">On the <span class="ph uicontrol">Alert List</span> page, select the target region.</span> </li><li class="li step stepexpand"> <span class="ph cmd">In the upper-right corner of the page, click <span class="ph uicontrol">Create</span> <span class="ph uicontrol">Alert</span>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">On the <span class="ph uicontrol">Create Alert</span> page, create an alarm rule as described in the following table:</span> <div class="itemgroup info"> <table class="table" id="Create_Alarm__table_p1s_4f1_xmb"><caption></caption><colgroup><col><col></colgroup><thead class="thead"> <tr class="row"> <th class="entry" id="Create_Alarm__table_p1s_4f1_xmb__entry__1">Configuration item</th> <th class="entry" id="Create_Alarm__table_p1s_4f1_xmb__entry__2">Description</th> </tr> </thead><tbody class="tbody"> <tr class="row"> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__1 "> <p class="p">Alert policy name</p> </td> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__2 "> <p class="p">Name of the alarm rule.</p> <ul class="ul" id="Create_Alarm__ul_bgd_lxl_wnb"> <li class="li">Supported characters are Chinese characters, uppercase and lowercase letters, digits, and special characters including underscores (_), hyphens (-), and at signs (@).</li> <li class="li">The length of the name is 1 to 45 characters.</li> </ul> </td> </tr> <tr class="row"> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__1 "> <p class="p">Event Keyword</p> </td> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__2 "> <p class="p">Keywords for querying log content. You can define an alarm rule by using AND OR to combine multiple alarm keywords.</p> <p class="p"> For example, (keyword1 AND keyword2) OR (keyword3).</p> </td> </tr> <tr class="row"> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__1 "> <p class="p">Region</p> </td> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__2 "> <p class="p">Select the region to which the alarm rule is applied.</p> </td> </tr> <tr class="row"> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__1 "> <p class="p">Use Project Groups</p> </td> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__2 "> <p class="p">Select the project to which the alarm rule is applied.</p> </td> </tr> <tr class="row"> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__1 "> <p class="p">Use For Groups</p> </td> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__2 "> <p class="p">Select the host group to which the alarm rule is applied.</p> <div class="note important note_important"><span class="note__title">Important:</span> The alarm rule takes effect only on the log data that is collected from the selected host group.</div> </td> </tr> <tr class="row"> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__1 "> <p class="p">Trigger condition</p> </td> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__2 "> <p class="p">An alarm will be triggered when the number of times that logs match the alarm rule within the specified period is greater than or less than the value you set.</p> </td> </tr> <tr class="row"> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__1 "> <p class="p">Return Logs </p> </td> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__2 "> <p class="p">Number of the exception logs reported in each alarm notification email. The value range is 0 to 100.</p> </td> </tr> <tr class="row"> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__1 "> <p class="p">Notification Limitation </p> </td> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__2 "> <p class="p">Select when to send notifications. Options are:</p> <ul class="ul" id="Create_Alarm__ul_hgm_5xl_wnb"> <li class="li">Do not send the notification repeatedly before an alarm is fixed.</li> <li class="li">Send only one notification within the specified period. The default setting is one minute.</li> <li class="li"> Do not send notifications within the specified period. Options are every day, weekends, legal holiday, and custom period.</li> </ul> </td> </tr> <tr class="row"> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__1 "> <p class="p">Mailbox </p> </td> <td class="entry" headers="Create_Alarm__table_p1s_4f1_xmb__entry__2 "> <p class="p">Email address for receiving alarm notifications, for example, example@pingan.com.cn. Only Ping An mailboxes are supported.</p> </td> </tr> </tbody></table> </div> </li><li class="li step stepexpand"> <span class="ph cmd">On the right side of the page, click <span class="ph uicontrol">CONFIRM</span>.</span> </li></ol></section> <section class="section result" id="Create_Alarm__result_ktp_qf1_xmb"><div class="tasklabel"><h2 class="doc-tairway">Results</h2></div> <p class="p">On the <span class="ph uicontrol">Alert List</span> tab, the new alarm rule is displayed.</p> <img class="image" id="Create_Alarm__image_exw_sf1_xmb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20210106133703-1bf475ac958d.png" width="830"> </section>