Manage anomaly notifications
The anomaly detection engine is always running. You can choose notifications for near-real-time email alerts on detected anomalies or send alerts to Slack.
Required permissions
- Users Manager, Anomalies Viewer
Manage notifications in Slack
To acknowledge cost anomalies in Slack, you must integrate the DoiT console with Slack. How you configure your Slack integration with DoiT depends on whether you want to send cost anomaly acknowledgements to a Slack channel shared with DoiT or a Slack channel in your own Slack workspace.
-
If you want your acknowledgements to go to a Slack channel shared with DoiT, then create a shared Slack channel. Cost anomalies are enabled for every Slack channel shared with DoiT by default. Refer to Manage notifications in Doit console.
-
If you want your acknowledgements to go to a Slack channel in your own Slack workspace, then install the DoiT app for Slack and create a notification for Manage notifications in Doit console.
Manage notifications in Doit console
To manage your notifications:
-
Sign in to the DoiT console, select the gear icon () from the top navigation bar, and then select Notifications.
-
Create a new notification or edit an existing one.
-
To be notified of potential anomalies, under Cloud cost anomalies, select the Cost anomaly detection checkbox and specify the notification conditions as needed.
Notification conditions
-
Scope: Choose resource groups (attributions) whose anomalies will trigger the alert notification. You can use this option to get notified only on anomalies related to a specific team or project.
-
Anomaly severity: Set the minimum severity threshold that will trigger the alert notification. There are three severity levels: Information, Warning, and Critical. By default, the severity level for email alerts is Critical.
-
Anomaly threshold: Set the minimum amount of the cost of anomaly that will trigger the alert notification. The threshold is the gap between your actual cost and the maximum cost in the normal range. You can't use decimals in this field.
Be aware that:
-
If you select an attribution as the Scope, you receive notifications only for anomalies within that specific attribution. You don't receive notifications for anomalies that occur within a broader (superset) or a narrower (subset) scope of that attribution.
-
If you choose multiple conditions, you receive notifications only when all of the specified conditions are met.