Overview
Bronto gives you the ability to create monitors that actively run searches across your data and notify your teams via email or custom webhooks.Create Monitors
To create monitors in Bronto:Apply a filter, search is in simple mode. For search syntax see here.

Setting Alert Conditions
The alert conditions can be configured to trigger if the count of the query reaches a predefind threshold.- Evaluate the query count over the last: 5 minutes, 10 minutes, 30 minutes, 1 hour, 2 hours, 4 hours or 1 day. Evaluation is across a rolling time window in groups aligned from midnight.
- Evaluate if query is above, above or equal to, below, or below or equal to the threshold.
- Trigger if Alert Threshold literal value is matched.
Configure notifications
Configure your notification messages to include the information you are most interested in and specify which user, email or webhook to send these alerts to.- Monitor Name.
- Monitor Description.
- View a preview of what the notification will look like.
Manage Monitors
Manage Monitors by editing, creating, bulk deleting and searching monitors all in the same place. From here you can easily view what email or webhook is associated to each monitor.
View Monitor Details & Status
Selecting a monitor to review from your list allows you to see its details which include its filter, source and recipients. From this page you can also view the status and event history
AI Investigation Reports
When a monitor fires, Bronto can automatically run an investigation and deliver a detailed report. This shifts the on-call responder’s role from manually gathering evidence to reviewing a diagnosis — significantly reducing Mean Time to Resolution (MTTR).How it works
When configuring a monitor, you can provide an Investigation Prompt — a plain text description that tells the AI what to check when the monitor fires. The AI uses this context to query your log data across multiple datasets, analyse the results, and produce a report that includes a potential root cause, diagnosis, and timeline of the issue. The report is delivered as a follow-up to the monitor notification, typically within a minute of the alert triggering.Writing an effective Investigation Prompt
The investigation prompt is where you give the AI the context it needs. The more specific you are, the more accurate the report. Useful things to include:- List of dependencies of the affected service
- Related logs and how to correlate/query them
- Relevant keys and metrics to check
- What to include in the report, like affected components, customers or users
You don’t need to define every step — the AI will query your data autonomously using the context you provide. Keeping the prompt focused and specific gives better results than lengthy documentation dumps.

