Smart Monitoring Events¶
The Smart Monitoring event explorer centrally displays all events generated by Smart Monitoring in the current workspace. You can filter by df_source:smartMonitor to view such events in any event explorer.
Event List¶
Go to Event Center > All Events, enter df_source:smartMonitor in the search bar, and view all Smart Monitoring events.
-
The stacked bar chart counts the Smart Monitoring events generated at different time points, providing an intuitive view of the time-series distribution of anomalous events;
-
Event filtering: supports keyword search, tag filtering, field filtering, and related search based on tags, fields, and text, allowing you to quickly locate Smart Monitoring anomalous events of a specific type;
-
Aggregation analysis: supports aggregated event analysis grouped by selected fields, multi-dimensional analysis based on tag fields in the analysis bar, and clicking an aggregated event to view its details.
Event Details¶
Click a Smart Monitoring event to open the details page, where you can view event content, analysis reports, extended fields, alert notifications, history, related events, and more.
Event Content¶
Shows the event content saved when the Smart Monitoring monitor was created or edited. It describes the monitored objects, detection rules, and event notification information.
Analysis Report¶
The analysis report summarizes the rules actually matched during the detection. A single detection may trigger multiple rules simultaneously; the system merges these results into one analysis report instead of generating a separate report for each rule.
The report typically includes:
- Anomaly Summary: Summarizes the anomaly counts and matched rules by detection dimensions such as host and service;
- Anomaly Details: Shows the matched rules, monitoring signals, current values, and judgment basis;
- Anomaly Cause: Explains the differences between current data and thresholds or the historical normal range;
- Trend Analysis: Uses trend charts to display metric changes, baselines, or anomaly intervals, helping you assess the duration and progression of anomalies.
The actual displayed content varies depending on the type of Smart Monitoring monitor, detection dimensions, and matched rules.
You can jump to the monitor associated with the current event, or export key event information to a PDF/JSON file.
