Timeslice environment3/25/2023 For example, if you plot a line chart across timeslices with missing data, the chart will interpolate across the missing timeslices and represent them deceptively as nonempty. Missing data can lead to misleading visualizations. For example, the outlier operator cannot catch anomalies arising from missing data because it can only mark an existing timeslice as anomalous. The lack of data is sometimes also an interesting event, but there is no easy way to capture this information.For example, if your query is grouping by timeslice, then only the timeslices that have data are returned. When you run a standard group-by query, Sumo Logic only returns non-empty groups in the results. Then use Save As > Schedule This Search to push alerts via Slack, Hipchat, Pagerduty, email, or your favorite alerting tool that accepts webhooks! If you don't yet have a webhook connection set up, see this link for instructions. now filter out and return just the outliers create a delta field that represents the difference between historical data and current data To alert on the deviations from the baseline (historical) error behavior, add one more line to push alerts only when an outlier is identified: Now you can see the spikes in the difference between yesterday’s errors and today’s errors, as noted by the Outlier markers (pink triangles): use an Outlier to statistically monitor spikes or dips in the delta create a delta field that represents the difference between historical and current data a relatively steady amount of errors yesterday (light blue).īut what if you wanted to alert on this? You can create a new field that represents the difference (delta) in yesterday’s data vs. You can see that there are some big spikes in errors today (dark blue) vs. For example, if you wanted to show a trend of errors, today vs. The Time Compare operator can be used to overlay and compare historical data with current data.
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |