- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
To get you started, Datadog automatically suggests pattern-based correlations according to your environment. Click any of the recommendations to open the configuration for the recommended pattern. Configuration fields are pre-populated.
To create a pattern:
First, events are deduplicated to alert based on event aggregation key. Then, alerts are correlated to a case based on configuration.
For more information on how to sends events with aggregation key, see send events to datadog. Events without an aggregation key are deduped to one single alert within the timeframe.Suggested patterns are recommended based on your commonly used service and environment tags to help you get started with event correlation quickly.
From the correlation configuration page
Click Show Advanced Settings.
You can add non-alerting sources and add grouping tags to correlate events.
Under Advanced correlation logic, you can specify the minimum number of correlated events it takes to create a case and update the timeframe.
Timeframe explanation
Correlate alerts to a case for : The max duration that net new alerts will be added to a case
Deduplicate events for those alerts for : The max duration for current alerts which have been correlated, but continue to flap or have not resolved. Events are deduped to the corresponding alert in the existing case before opening a new case
Preview the possible patterns and cases your configuration would potentially create. The preview panel displays
Use this data to preview the impact of your correlations and understand the expected output of a pattern.
Notes: the default title in the preview case is the first alert in correlation. After you save a pattern, the event management case title is intelligently generated.
After you update an existing pattern, all live cases will stop processing. New events that match the pattern will create a new case.
Additional helpful documentation, links, and articles: