You can create an alert rule on the Search & Analysis page of a Logstore or on a dashboard page in the Log Service console. After you create an alert rule, Log Service sends alert notifications when the trigger condition in the alert rule is met.
Prerequisites
- Logs are collected and stored in a Logstore.
- The indexing feature is enabled and indexes are configured. For more information, see Configure indexes.
Background information
Log Service allows you to configure alerts based on charts. You can create an alert
rule for a query statement on the Search & Analysis page. After you create the alert
rule, a chart that shows the query result of the statement is automatically created
in the specified dashboard. You can also create an alert rule for one or more existing
charts in a dashboard.
Notice If you modify the query statement of a chart with which an alert rule is associated,
you must update the query statement in the alert rule. For more information, see Modify the configurations of an alert rule.
- Create a chart and configure an alert rule for the chart
After you create an alert rule for a query statement, a chart that shows the query result of the query statement is automatically created in the specified dashboard. Therefore, when you create an alert rule for a query statement, you must specify a dashboard and name the chart.
- Create an alert rule for existing charts on a dashboard
When you create an alert rule for existing charts, you can specify one or more charts with which you want to associate the alert rule. You can then specify a conditional expression for each chart, and then combine the conditional expressions into a trigger condition of the alert rule.
Procedure
FAQ
How can I view the serial number of a chart?
You can view the serial number of a chart in the Associated Chart section. The first chart is numbered 0, the second chart is numbered 1, and the third
chart is numbered 2. The serial number of a query statement is the same as the serial
number of the chart that shows the result of the query statement. 

What to do next
After you create an alert rule, you can manage the alert rule and view the alerts that are triggered based on the alert rule. For more information, see View the evaluation results of alert rules.