Alerts as a notification source type

Alerts are one example of a notification source type, a component of the Coralogix infrastructure capable of sending notifications.

Supported alert subtypes

A notification source subtype adds an added layer of granularity to a notification source type. For alerts, a source subtype consists of three elements: an alert type, a condition, and status.

The following alert source subtypes are supported:

All supported alert notification source subtypes, consisting of EntityType and EntitySubType, can be found in the Alerts API.

Alerts notification source type schema

General reference

alert

Represents the alert details, including timestamp, ID, status, and group information.

alertDataUrl

Link to the incident page (e.g., https://coralogix.com/#/insights?id=76c411be-gg4d-4fb1-a987-5fce042deaaf).

groupingKey

Used as the deduplication key.

groups

List of alert groups associated with the alert (including priority and key-values).

groups[n]

keyValues

Key-value pairs associated with the alert group; e.g., "team": "\{\{alert.groups[0].keyValues.resource.attributes.Team}}" or "service":"\{\{alert.groups[0].keyValues.coralogix.metadata.subsystemName}}"

resource

attributes

Team

coralogix

metadata

subsystemName

id

Unique identifier of the alert. Use it to create an alert URL in your notification; e.g., "alert_url": "https://teamname-prod.app.eu2.coralogix.com/#/alerts/\{\{alert.id}}"

priority

Priority level of the alert group (e.g., "P1").

status

Current status of the alert (e.g., "Triggered").

timestamp

The timestamp indicating when the alert was triggered.

alertDef

Defines the alert configuration, including name, description, groupings, incident settings, and priority.

alertVersionId

The version ID associated with the alert definition.

createdTime

The timestamp when the alert definition was created.

description

A textual description of the alert definition.

entityLabels

Labels associated with the alert definition (e.g., host, region).

groupByKeys

List of keys by which the alert is grouped (e.g., host, region).

id

The unique identifier of the alert definition.

incidentSettings

Configuration related to incident settings (e.g., retriggering period).

notifyOn

Notification setting for the alert definition (e.g., "Triggered").

name

Name of the alert definition (e.g., "CPU Usage Alert").

priority

Priority level of the alert definition (e.g., P1).

retriggeringPeriod

Time in minutes after which the alert can be retriggered.

status

Current status of the alert definition.

type

Type of the alert (e.g., "metricThreshold").

updatedTime

The timestamp when the alert definition was last updated.

Context reference

All templates have access to the _context variable, which contains metadata about the notification source type, including system identifiers and trigger details. This context allows you to dynamically customize your template content based on the notification's origin.

Find out more here

Related resources

Notification CenterDynamic templatingPresets

Next steps

Configure outbound webhook notification settings in Configure alert notifications for outbound webhooks.