Overview
Live process monitors are based on data collected by the Process Agent. Create monitors that warn or alert based on the count of any group of processes across hosts or tags.
Monitor creation
To create a live process monitor in Datadog, use the main navigation: Monitors –> New Monitor –> Live Process.
Select processes
Search for a process to monitor using a space separated list of strings. The search performs a partial match, fuzzy search across all processes on your infrastructure. Search operators AND, OR, and NOT are supported. See the Live Process Monitoring page for details. Additionally, filter by tags to refine your monitor to a specific scope.
Matching processes and counts are displayed below the search:
After defining your search, a graph is displayed above the search inputs with an approximation of the total number of processes found. For more granular data, visit your Live Process Page.
Alert grouping
Simple Alert (default): aggregates alerts over all reporting sources. You receive one alert when the aggregated value meets the set conditions.
Multi Alert: applies the alert to each source according to your group parameters. You receive an alert for each group that meets the set conditions.
Set alert conditions
- The count was
above, above or equal to, below, or below or equal to - the threshold during the last
5 minutes, 15 minutes, 1 hour, etc. or custom to set a value between 1 minute and 48 hours.
Use thresholds to set a numeric value for triggering an alert. Datadog has two types of notifications (alert and warning). Live process monitors recover automatically based on the alert or warning threshold.
Advanced alert conditions
For detailed instructions on the advanced alert options (auto resolve, evaluation delay, etc.), see the Monitor configuration page.
Notifications
For detailed instructions on the Say what’s happening and Notify your team sections, see the Notifications page.
Further Reading
Additional helpful documentation, links, and articles:
