Edge Delta Metrics Explorer (Retired)

This page is deprecated. Please see the Metrics Explorer.

Overview

The Metrics - Explorer page displays the metric outputs of processors. Based on your configurations, a processor generates metrics that are reported to the Edge Delta backend, as well as to the configured triggering destination. These metrics populate most charts in the Edge Delta App.

Filter Pane

You can filter data using the Filters pane:

• Agent Tag
• Source Type
• Source
• Host
• Kubernetes

Lookback

To specify the lookback period, click Lookback.

• To view data for a preset time frame, click the duration in the Relative section.
• To view data for a specific date and time period, click Custom, enter the duration and click Apply.

Filter Bar

You can further filter metrics using the Filters bar. You filter on a Metric, specify the Aggregation type and calculation period (Window). You can also Group By results to filter data based on data sources depending on the selected tag and source type.

You can add historical comparison series to the chart by selecting Previous Period, 3h Prior and 12h Prior.

Create a Custom Metric Alert

You can create a custom metric alert based on the selected filters. Click Create Alert and complete the form:

• Name: Enter a descriptive name for this metric alert.
• Type: This field will be pre-populated and cannot be changed.
• Filters: This field will be pre-populated based on the filter options you had applied.
• Metric: This field will be pre-populated based on your metric filter.
• Aggregation: Select an aggregate function to tally data.
• Window: Select a duration to organize data into separate buckets.
• Group By: Select a dimension to organize data into separate groups.
• Tresholds: Configure the Anomaly Score and Value settings that must be met in order to generate an alert. The Anomaly Score is based on the configuration of your processors. To learn more, see Processors.
• Lookback: Enter a timeframe of previous data to monitor.
• Email Recipients: Enter an email address that will receive the alert. Instead of an email address, you can also select an existing triggering output.
• Trigger Endpoints: Select an existing triggering output to receive the alert.
• Suppression Window: Select a time period in hours where a notification for a similar alert will not be sent more than once during the specified time period.
• Timezone: Select a timezone to be used to define the data in the alert.
• Enabled: Select Yes to enable this alert.

The alert is added to the Monitors page.

Example

In this example, the custom alert will trigger if the sum (aggregation) of api_access.count (metric) over *5 minutes (window) period exceeds 10,000 (value). This threshold is evaluated every 5 minutes (window) in Edge Delta backend, which aggregates the metrics reported by the agents that correspond to admin-api-backend (filters - tag).