Monitor Details¶
The Monitor Details page brings together detection trends, object status history, and an event timeline on the same page, so you can trace how an anomaly occurred. The monitored object details focus on a single source object and can also include other objects in the same monitor for trend comparison.
Prerequisites¶
- You have permissions to view monitors and query event data. To view detection trends, you also need read permissions for the corresponding metrics, logs, and other data.
- Applies to threshold detection, log detection, APM metric detection, RUM metric detection, and Synthetic Testing Anomaly Detection configured with DQL or PromQL detection queries. For other types, view related events from the monitor event list.
- To view data from another workspace, complete cross-workspace authorization first.
Open Details¶
| Entry point | View scope |
|---|---|
| View Monitor Details in the row actions of the Monitoring > Monitors list | Events for this monitor, defaulting to the last 6 hours. If the source page already has a time range, that range is inherited. |
| Monitor name in the dashboard Monitor Summary | Events for this monitor, inheriting the chart's workspace and time range. |
| Dimension value of a monitored object in Monitor Summary | Events for this object, inheriting the chart range and locating the most recent event. |
Select Time and Monitored Objects¶
The query time at the top supports a maximum of 48 hours. Object candidates are objects that actually generated events within this time range, and the chart can compare up to 10 objects at the same time.
View Detection Trends and Status History¶
Detection Trends¶
The curves and thresholds in Detection Trends are queried according to the currently saved monitor rules. Event markers are taken from actual event records and can be used to compare metric changes against event occurrence times.
Curves vs. event detection values: The curves use current rules, while event detection values and statuses retain the results from the time of the event. After rule changes or historical data updates, the two may differ. When checking an alert, evaluate it based on the selected event's detection value, detection query, and detection scope.
Status History¶
Switch to Status History to compare object status and metric values at the same point in time between the status bar and the detection trend. Color segments represent the continuation of the latest event status; consecutive events with the same status are merged in the display. The timeline still retains every actual event.
Unknown indicates that no decidable record exists or that records conflict. Data Missing is an event status actually generated by the monitor.
Zooming and Dense Events¶
In general, local zoom only adjusts the chart, while the timeline continues to use the top-level time range.
When events are dense, use the time selection area below the chart to view a local period. A single selection is limited to 2 hours. In this case, both the chart and the event timeline use the current selection.
View Events Along the Timeline¶
The timeline retains anomaly events, Normal / Recovered events, and repeated trigger records. Select a record to view the event content, detection values, and detection query.