Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fuser-guides%2Fmcp-server%2Ftools%2Falerts.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fuser-guides%2Fmcp-server%2Ftools%2Falerts.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.) # Alerts Manage the full lifecycle of [Coralogix Alerts](https://docs-docusaurus.kinsta.page/user-guides/alerting/introduction-to-alerts/.md) directly from your AI agent. The MCP server provides a unified tool to create, retrieve, update, and delete alerts—and generate infrastructure-as-code definitions from any alert configuration. Go from a natural-language prompt to a deployed alert or an IaC module in a single conversation. ## Tool[​](#tool "Direct link to Tool") All alert operations are handled by a single unified tool: `manage_alerts`. | Action | Description | | --------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `create` | Create a new alert. The agent always asks you to specify a priority (P1–P5) before creating. | | `get` | Retrieve a specific alert by ID. | | `list` | List alerts with an optional case-insensitive name filter. | | `update` | Update an existing alert. The agent retrieves the current configuration first, then applies your changes. | | `delete` | Delete an alert by ID. If you only have the alert name, use `list` first to find the ID. | | `generate_openapi` | Generate the OpenAPI JSON payload for use with the Coralogix REST API. | | `generate_kubernetes` | Generate a Kubernetes Operator YAML manifest for the [Coralogix Operator](https://docs-docusaurus.kinsta.page/external/coralogix-operator). | | `generate_terraform` | Generate Terraform HCL for the [Coralogix Terraform Provider](https://docs-docusaurus.kinsta.page/developer-portal/infrastructure-as-code/terraform-provider/coralogix-terraform-provider/.md). | IaC generation actions work with both existing and newly described alerts. To export an existing alert, retrieve it first with `get` or `list`, then pass it to the generation action. You can also describe an alert from scratch and generate IaC without creating it in Coralogix. ## Supported alert types[​](#supported-alert-types "Direct link to Supported alert types") The tool supports all 12 Coralogix alert types: | Alert type | Key | | -------------------------------------------------------------------------------------------------------------------------------------- | --------------------------- | | [Logs Threshold](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/logs/threshold-alerts/.md) | `logsThreshold` | | [Logs Anomaly](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/logs/anomaly-detection-alerts/.md) | `logsAnomaly` | | [Logs Immediate](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/logs/immediate-notifications/.md) | `logsImmediate` | | [Logs New Value](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/logs/new-value-alerts/.md) | `logsNewValue` | | [Logs Ratio Threshold](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/logs/ratio-alerts/.md) | `logsRatioThreshold` | | [Logs Time-Relative Threshold](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/logs/time-relative-alerts/.md) | `logsTimeRelativeThreshold` | | [Logs Unique Count](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/logs/unique-count-alerts/.md) | `logsUniqueCount` | | [Metric Threshold](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/metrics/threshold-alerts/.md) | `metricThreshold` | | [Metric Anomaly](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/metrics/anomaly-detection-alerts/.md) | `metricAnomaly` | | [Tracing Immediate](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/traces/tracing-alerts/.md) | `tracingImmediate` | | [Tracing Threshold](https://docs-docusaurus.kinsta.page/user-guides/alerting/create-an-alert/traces/tracing-alerts/.md) | `tracingThreshold` | | [SLO Threshold](https://docs-docusaurus.kinsta.page/user-guides/slos/alerts/.md) | `sloThreshold` | ## Example prompts[​](#example-prompts "Direct link to Example prompts") ### Create an alert[​](#create-an-alert "Direct link to Create an alert") ``` Create a P2 logs threshold alert that fires when the error count in the payment-service exceeds 100 in a 5-minute window. ``` ### List and filter alerts[​](#list-and-filter-alerts "Direct link to List and filter alerts") ``` List all alerts with "latency" in the name. ``` ### Update an alert[​](#update-an-alert "Direct link to Update an alert") ``` Change the threshold on my "API Error Rate" alert from 100 to 50. ``` The agent retrieves the alert first, then applies your changes. ### Delete an alert[​](#delete-an-alert "Direct link to Delete an alert") ``` Delete the alert named "Legacy - Disk Usage". ``` ### Generate Terraform for a new alert[​](#generate-terraform-for-a-new-alert "Direct link to Generate Terraform for a new alert") ``` Generate Terraform HCL for a P2 logs threshold alert that fires when error count exceeds 100 in 5 minutes for the payment-service. ``` ### Generate Terraform from an existing alert[​](#generate-terraform-from-an-existing-alert "Direct link to Generate Terraform from an existing alert") ``` Generate the Terraform HCL for my "API Error Rate" alert. ``` The agent retrieves the alert, then renders the Terraform resource definition. ### Generate Kubernetes YAML from an existing alert[​](#generate-kubernetes-yaml-from-an-existing-alert "Direct link to Generate Kubernetes YAML from an existing alert") ``` Generate the Kubernetes Operator YAML for my "High Error Rate" alert. ``` ### Create and export in one conversation[​](#create-and-export-in-one-conversation "Direct link to Create and export in one conversation") ``` Create a P3 logs threshold alert that fires when login failures exceed 50 in 10 minutes, then generate the Terraform HCL and Kubernetes YAML for it. ``` ### Bulk export[​](#bulk-export "Direct link to Bulk export") ``` List all alerts with "production" in the name and generate Terraform HCL for each one. ``` ## Important behaviors[​](#important-behaviors "Direct link to Important behaviors") * **Priority is always user-specified.** The agent prompts you for a priority level (P1–P5) before creating an alert. It does not assign a default. * **Update requires retrieval first.** To update an alert, the agent retrieves the current configuration using `get` or `list`, then applies your changes. * **IaC generation requires the full alert definition.** For existing alerts, the agent retrieves the alert first. For new alerts, describe the configuration and the agent generates IaC without creating the alert in Coralogix. * **Full type coverage.** Every alert type available in the Coralogix platform has a dedicated schema, giving you the same granularity as the UI. ## Next steps[​](#next-steps "Direct link to Next steps") Manage log transformation during ingestion with [Parsing Rules](https://docs-docusaurus.kinsta.page/user-guides/mcp-server/tools/parsing-rules/.md).