You can change the trigger of a saved alert query, and enable or disable the notifications that the query sends .

Note

Alert queries are user specific. You can manage only your own alerts.

Content pack alert queries are read-only. To save changes to a content pack alert, you have to save the alert to your custom content.

Verify that you are logged in to the Log Insight Web user interface. The URL format is https://log_insight-host, where log_insight-host is the IP address or host name of the Log Insight virtual appliance.

Verify that an administrator has configured SMTP to enable email notifications. See Configure the SMTP Server for Log Insight.

Verify that an administrator has configured the connection between Log Insight and vCenter Operations Manager to enable alert integration. See Enable the Sending of Notification Events to vCenter Operations Manager.

1

Navigate to the Interactive Analytics tab.

2

From the menu on the right of the Search button, click and select Manage Alerts.

3

In the Alerts list, click the alert query that you want to modify, and change the query parameters as needed.

Note

If you deselect both notification options, the alert query is disabled.

4

Save your changes.

Option

Description

Save

This button appears when you modify your own alerts.

Save to My Alerts

This button appears when you modify a shared alert or a content pack alert. The original alert remains unchanged, but you save a copy of the alert to your custom content.