Sections and cards on the Overview tab for a Log Analytics group in Health Log Analytics
The Overview tab in the Service Operations Workspace helps you understand Log Analytics groups.
For a detailed description of Log Analytics groups, see Types of Health Log Analytics alerts.
Summary
- Identified issue
-
This card describes the issue that led to the alert. The identified issue appears on the card and in the title for the alert. Information about the alert appears in the banner.
Figura 1. Identified issue Select View correlations to view the list of correlations that relate the Log Analytics alerts.
- Correlations list
-
During initial analysis, alerts are scored. Each correlation in the alert's log data with another alert contributes to the score. The higher the score, the more likely the alert is to be included as a Log Analytics alert in a Log Analytics group.
The following kinds of data are considered when determining whether alerts are correlated:
- Time: The events all occurred within a configured time interval.
- Metadata: The alerts have matching values in log-line metadata. For example, all alerts involve the same host.
- Message text: The message text in the log data is similar or identical between alerts.
- Trend: The alerts show a similar tendency in values or rates. For example, a particular metric value is increasing in all alerts.
Figura 2. Correlations - List of correlations: The first correlation in the list is expanded to show the individual Log Analytics alerts that are correlated and the log correlator that the alerts share.
- An individual log correlator: The identifier for a group of correlated Log Analytics alerts. The alerts are grouped by the log-line data or metadata that is common to the alerts (for example, IP address, host name, or user name). The number in the blue square indicates the number of correlated alerts.
- Log Analytics alerts that are correlated.
- Alerts in group
-
For a Log Analytics alert, the Alerts in group card shows the Log Analytics alerts that are grouped under the Log Analytics alert. Select a Log Analytics alert to view its details.
Figura 3. Alerts in group Select View all to the view the list of all Log Analytics alerts in the group and relevant information about them. You can also view the Alerts in group list by selecting the Related records tab and then selecting Alerts in group. For more information, see View the Log Analytics alerts in a Log Analytics group in Health Log Analytics
Impact
- Configuration Items
- This card provides information about the CIs that are impacted by the alert.
- Impacted services
- This card provides information about the services that are impacted by the alert.
Figura 4. Impact section