Key Features

• Identified issue card: Displays the main issue triggering the alert, including a banner with alert information and a title reflecting the identified problem. You can select View correlations to see related alert correlations.
• Correlations list: Shows how alerts are scored and grouped based on correlations in log data. Correlation criteria include:
• Time: Events occurring within a configured interval
• Metadata: Matching values in log-line metadata, such as the same host
• Message text: Similar or identical log message content
• Trend: Similar tendencies in values or rates, like increasing metrics
• The first correlation expands to show individual correlated alerts and the log correlator identifier, which groups alerts by common log-line data (e.g., IP address, host name).
• Alerts in group card: Lists all Log Analytics alerts within the group. You can select individual alerts for detailed views or choose View all to see the full list and relevant details. This list is also accessible via the Related records tab under Alerts in group.
• Impact Configuration Items card: Provides information about the configuration items affected by the alerts.
• Impacted services card: Shows which services are impacted by the alert group, helping prioritize response based on service criticality.

Key Outcomes

• Quick identification of the root cause of alerts through the identified issue and correlations.
• Efficient grouping and analysis of related alerts using correlation scoring based on multiple log data attributes.
• Clear visibility into the scope of impact on configuration items and services, enabling prioritized remediation.
• Accessible and comprehensive alert details via the Overview and Related records tabs, facilitating faster incident investigation and resolution.