Question

How can we get report or dashboard how many rules triggered overall in logpoint


Userlevel 1

How can we get report or dashboard how many rules triggered overall in logpoint


2 replies

Userlevel 1

You can Query the “_logpoint” Repo for Alerts.

Try the following Query:

 label="Notification" label="Incident" label="Audit"

 

And if you want a chart over the last 7 days, for example, append a chart count() to the query. Such as:

label="Notification" label="Incident" label="Audit"| timechart count() every 1 day

 

Userlevel 4
Badge +8

Hi @Mike Blomgren,

this only works for the retention time of the _logpoint repo.

 

It would be great if LogPoint would store some metrics in an “repo-independent” way in a seperate database (e.g. mongodb).

Reply