Skip to main content

​
Overview

Bronto gives you the ability to create monitors that actively evaluate logs or metrics and notify your teams via email or custom webhooks.

​
Create Monitors

To create monitors in Bronto:
1
Navigate to Monitors > New Monitor.
2
Choose a data source. Select Datasets to monitor log search results, or Metrics to monitor an OpenTelemetry metric.
3
Configure the query. For dataset monitors, select the dataset scope and apply a filter using Bronto’s search syntax. For metric monitors, search for and select the metric you want to evaluate.
4
Evaluate the query or formula over the desired time from the predefined options in minutes, hours or days.
5
Set Alert Conditions. Configure monitors to trigger if the query or formula value crosses a threshold.
6
Lastly, give the monitor a name, description , email address which can be an existing user or a custom email or select an existing webhook where the notification will be sent to.
Edit Monitor Pn

​
Add Queries and Formulas

Use + Add Query and + Add Formula to build a monitor from more than one query result. Each query has a name, such as errors, requests, or cpu, which you can reference in a formula. If a monitor includes more than one query, add a formula to combine the query results before configuring the alert condition.

​
Add a Query

Select + Add Query to add another independently configured query to the monitor. The new query can use a different data source, scope, filter, metric, aggregation, or grouping from the first query. For example, to prepare a monitor that tracks the HTTP error rate:
  1. Configure query errors to count requests with a status code of 500 or higher.
  2. Select + Add Query.
  3. Configure query requests to count all requests.
The monitor now has the failed request count in errors and the total request count in requests.

​
Add a Formula

Select + Add Formula to calculate a value from numbers, query results, or a combination of both. Reference a query by entering its query name in the formula. Formulas support:
  • Parentheses: ( and )
  • Addition, subtraction, multiplication, and division: +, -, *, and /
  • Numerical constants, including decimals, such as 100, 5, or 1.5
  • Variables that match the names of queries in the monitor
Variable names must be alphanumeric and start with a letter. Only variables based on query names in the monitor are allowed. You can reference any number of variables in a formula, and each monitor can include up to six queries. You can also use + and - as unary operators to explicitly set the sign of a value. For example, errors + -5, -requests + 1000, and errors + +requests are valid formulas. Continuing the HTTP error-rate example:
  1. Select + Add Formula.
  2. Enter errors / requests * 100 to calculate the percentage of requests that returned server errors.
  3. Configure the alert condition against the formula result. For example, trigger the monitor when the error rate is above 5.
This alerts when more than 5% of requests return server errors. For metrics, formulas work the same way. For example, configure query usage as a CPU utilization metric and query limit as a CPU limit metric, then use usage / limit * 100 to alert on percentage utilization.

​
Setting Alert Conditions

The alert conditions can be configured to trigger if the query or formula value reaches a predefined threshold.
  • Evaluate the query or formula over the last: 5 minutes, 10 minutes, 30 minutes, 1 hour, 2 hours, 4 hours or 1 day. Evaluation is across a rolling time window in groups aligned from midnight.
  • Evaluate if query is above, above or equal to, below, or below or equal to the threshold.
  • Trigger if Alert Threshold literal value is matched.
For metric monitors, threshold unit selection is a display helper. It lets you enter the threshold in a convenient unit and formats the preview chart, but it does not change the trigger logic. Bronto translates the selected unit into the raw value used to create and evaluate the monitor.

​
Configure notifications

Configure your notification messages to include the information you are most interested in and specify which user, email or webhook to send these alerts to.
  • Monitor Name.
  • Monitor Description.
  • View a preview of what the notification will look like.
If you are sending monitor alerts to a webhook, see Sample Payload Schema for the available variables and JSON template options.

​
Manage Monitors

Manage Monitors by editing, creating, bulk deleting and searching monitors all in the same place. From here you can easily view what email or webhook is associated to each monitor.
Manage Monitors Pn

​
View Monitor Details & Status

Selecting a monitor to review from your list allows you to see its details which include its filter, source and recipients. From this page you can also view the status and event history
Monitor Details Pn

​
AI Investigation Reports

When a monitor fires, Bronto can automatically run an investigation and deliver a detailed report. This helps responders move from alert to diagnosis faster by attaching AI-generated analysis directly to the monitoring workflow. Enable AI Investigation Report in the monitor configuration, then provide an Investigation Prompt to tell the AI what to check when the alert triggers. For the full workflow, prompt guidance, and feature details, see AI Investigation Reports.