Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ALERT_CONTEXT to alert document for Log Threshold Rule #155484

Closed
Tracked by #150854
benakansara opened this issue Apr 21, 2023 · 3 comments
Closed
Tracked by #150854

Add ALERT_CONTEXT to alert document for Log Threshold Rule #155484

benakansara opened this issue Apr 21, 2023 · 3 comments
Assignees
Labels
Team: Actionable Observability - DEPRECATED For Observability Alerting and SLOs use "Team:obs-ux-management", for AIops "Team:obs-knowledge" v8.8.0

Comments

@benakansara
Copy link
Contributor

benakansara commented Apr 21, 2023

Describe the feature:
We have groupByKeys context variable that has group-by keys and values of the rule as an object. This is available to use in active/recovered alert notifications. We also need this information in the alert document so that it can be used to show source of the alert in the alert details page. To do this, we need to save groupByKeys object in the alert document in AAD index.

As there might be new fields being added in the alert's context in the future, we should index the whole context in the AAD instead of only groupByKeys that is needed currently.

@benakansara benakansara added the Team: Actionable Observability - DEPRECATED For Observability Alerting and SLOs use "Team:obs-ux-management", for AIops "Team:obs-knowledge" label Apr 21, 2023
@elasticmachine
Copy link
Contributor

Pinging @elastic/actionable-observability (Team: Actionable Observability)

@benakansara
Copy link
Contributor Author

Will be done with this PR.

@benakansara benakansara changed the title Save groupByKeys to alert document for Log Threshold Rule Add ALERT_CONTEXT to alert document for Log Threshold Rule Apr 24, 2023
@simianhacker
Copy link
Member

Closed with #155327

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team: Actionable Observability - DEPRECATED For Observability Alerting and SLOs use "Team:obs-ux-management", for AIops "Team:obs-knowledge" v8.8.0
Projects
None yet
Development

No branches or pull requests

3 participants