Docs » Introduction to alerts and detectors in Splunk Observability Cloud » Scenarios for finding and resolving infrastructure problems using alerts and detectors » Scenario: Kai finds active alerts to investigate a CPU issue

Scenario: Kai finds active alerts to investigate a CPU issue đź”—

Kai, a site reliability engineer at Buttercup Games, has created a detector called “CPU Detector” that monitors Buttercup Games host machine’s CPU usage for sudden changes. Kai has received many alerts from this detector, and wants to get a more detailed view of these alerts.

Using the Alerts & Detectors page in Splunk Observability Cloud, Kai can find and view these active alerts so they can easily troubleshoot the CPU changes.

Find active alerts using the search list đź”—

From the Alerts & Detectors page, Kai can find active alerts using the search list. Kai follows these steps:

  1. Kai wants to find an active alert, so they select the Active Alerts tab.

  2. Kai enters filters so they can find their active alerts more easily. They enter desired values for the following fields:

Field

Value

Description

Group By

host.name

Groups active alerts from the same host machine name into one category.

Team

Buttercup Games

Shows only active alerts from detectors created by the Buttercup Games team.

After applying filters, Kai finds a list of active alerts triggered by their detector:

This screenshot shows a list of active alerts.

View details of active alerts đź”—

Now that Kai has found their active alerts in the search list, Kai wants to see which alerts are active for this detector.

Kai can now view a detailed report of each active alert associated with their detector by selecting the alert name.

This screenshot shows a detailed view of one of the alerts, displaying a spike in CPU value.

By viewing several of these alerts, Kai determines that one of their host machines experienced spikes in CPU utilization.

Summary đź”—

Kai viewed a list of active alerts triggered by their detector. By finding and viewing the detailed reports of these active alerts, Kai discovered that one of their host machines experienced sudden increases in CPU usage, and they can now troubleshoot the problem more easily.

Learn more đź”—

For more information about ways to view alerts, see View alerts in Splunk Observability Cloud.

For more information about ways to view detectors, see View detectors.

This page was last updated on Oct 17, 2024.