Feature overview - Simple Log Service - Alibaba Cloud Documentation Center

This topic describes the features that are included in the alerting module in Simple Log Service.

Category	Subcategory	Feature	Description
Alert monitoring	Basic feature	Query and analysis of logs	You can use the query statements of Simple Log Service and the SQL-92 syntax to query and analyze logs. For more information, see Syntax.
		Query and analysis of metrics	You can use the PromQL syntax and SQL-92 syntax to analyze data. For more information, see Overview of query and analysis on metric data.
		Machine learning	The machine learning feature supports various AIOps algorithms, including the algorithms that are used for forecasting, anomaly detection, and root cause analysis. For more information, see Machine learning syntax.
	Associated monitoring	Associated monitoring for Logstores or Metricstores	You can use SQL JOIN clauses or set operations to perform associated monitoring on Logstores or Metricstores.
		Associated monitoring for Logstores and Metricstores	You can use SQL JOIN clauses or set operations to perform associated monitoring on Logstores and Metricstores.
		Associated monitoring across projects	You can use set operations to perform associated monitoring across projects.
		Associated monitoring across regions	You can use set operations to perform associated monitoring across regions.
		Associated monitoring across Alibaba Cloud accounts	You can use set operations to perform associated monitoring across Alibaba Cloud accounts.
		Blacklist and whitelist monitoring	You can use blacklists and whitelists to monitor resource data.
	Monitoring rule orchestration	No-data alert	You can configure no-data alerts.
		Alert severity	You can configure alert severities in static or dynamic mode.
		Label and annotation	You can configure custom labels and annotations for alerts. You can set an annotation value to a variable.
		Group evaluation	You can group query and analysis results.
		Recovery notification	You can configure recovery notifications.
		Threshold of continuous triggers	You can specify a threshold of continuous triggers to suppress alerts.
		Monitoring task	You can pause or disable a monitoring task. If you pause a monitoring task, you can specify a pause period after which the monitoring task is resumed.
Alert management	Alert denoising	Alert deduplication	You can configure settings to remove duplicate alerts in a time window. You can also specify an interval after which notifications are sent for duplicate alerts. For more information, see Deduplicate alerts based on fingerprints.
		Alert merging	You can create a route consolidation policy. If a large number of alerts that have similar attributes are triggered, they are grouped into one alert set based on the route consolidation policy. The alerts in the same set are merged into one alert. Then, a notification is sent for this alert. For more information, see Merge alerts.
		Alert silencing	You can create a silence policy. During a silence period, alerts that meet the specified conditions do not trigger alert notifications.
Notification management	Action policy	Dynamic dispatch and notification method configuration	Alert notifications can be dynamically dispatched to specified users, user groups, or on-duty groups by using a specified notification method. For more information, see Create an action policy.
	Notification object	User	You can specify independent users. For more information, see Create users and user groups.
		User group	You can specify a user group that contains multiple users. For more information, see Create users and user groups.
		On-duty group	You can create an on-duty group for users and user groups. You can schedule rotating shifts based on cycles and business hours. For more information, see Create an on-duty group.
	Calendar	Holiday	Holidays can be automatically identified. The notification methods can be automatically adjusted during holidays.
	Shift plan	Rotating shift	You can create a rotating shift for multiple users and user groups based on a specified cycle.
		Substitute shift	You can specify other employees as a substitute during a specified period of time.
		Holiday	Rotating shifts and substitute shifts can be automatically adjusted during holidays.
		Custom calendar	You can configure a custom calendar for your on-duty group. You can also reset the calendar.
	Notification method	Text message	Alert notifications are sent by using text messages.
		Voice call	Alert notifications are sent by using voice calls.
		Email	Alert notifications are sent by using emails.
		DingTalk	Alert notifications are sent by using DingTalk chatbots.
		Webhook	Alert notifications are sent to a custom webhook URL over HTTP or HTTPS. Webhooks allow you to use more notification methods such as WeCom, Lark, and Slack.
		Message Center	Alert notifications are sent by using Message Center.
Alert analysis	Alert Center	Report on the running records of alert rules	You can use a report on the running records of alert rules to fix errors in an efficient manner.
		Alert Rule Center	The Alert Rule Center dashboard displays the overall running status of alert rules and the trigger statistics status of alerts.
		Alert Pipeline Center	The Alert Pipeline Center dashboard displays the entire pipeline of alerts that are triggered based on the related alert rules. The pipeline starts from the alert management system and ends at the notification management system.
		Troubleshooting Center	The Troubleshooting Center dashboard displays the statistics of errors that occur in the alert monitoring system, alert management system, and notification management system. This allows you to fix errors in an efficient manner.
		Centralized storage	Centralized storage is supported for alert data. You can view received and processed alerts and also related logs. After you initialize alert settings, a project named sls-alert-Alibaba Cloud account ID-Region ID and a Logstore named internal-alert-center-log are automatically created in the region that you select. The Logstore is used to store alert data.