|
1 | 1 | --- |
2 | | -title: "Alert Engine (Monitors) Introduction" |
3 | | -description: "The Alert Engine (Monitors) integrates with various metric and log data sources, performs threshold evaluation based on user-configured alert rules through periodic data queries, generates alert events, and finally pushes them to Flashduty On-call for aggregation and delivery." |
| 2 | +title: "Alerting Engine (Monitors) Introduction" |
| 3 | +description: "The Alerting Engine (Monitors) integrates with various metric and log data sources, performs threshold evaluation based on user-configured alert rules through periodic data queries, generates alert events, and finally pushes them to Flashduty On-call for aggregation and delivery." |
4 | 4 | date: "2025-11-07T18:49:47.055+08:00" |
5 | 5 | url: "https://docs.flashcat.cloud/en/flashduty/monitors/introduction?nav=01JCQ7A4N4WRWNXW8EWEHXCMF5" |
6 | 6 | --- |
7 | 7 |
|
8 | | -## What is the Alert Engine (Monitors)? |
| 8 | +## What is the Alerting Engine (Monitors)? |
9 | 9 |
|
10 | | -The Alert Engine (Monitors) integrates with various metric and log data sources, performs threshold evaluation based on your configured alert rules through periodic data queries, generates alert events, and finally pushes them to Flashduty On-call for aggregation and delivery. |
| 10 | +The Alerting Engine (Monitors) integrates with various metric and log data sources, performs threshold evaluation based on your configured alert rules through periodic data queries, generates alert events, and finally pushes them to Flashduty On-call for aggregation and delivery. |
11 | 11 |
|
12 | | -Flashduty Monitors can replace the alerting capabilities of products like Nightingale, vmalert, and elastalert. The Monitors alert engine is designed to be extremely flexible and deeply integrated with On-call products, capable of meeting various complex alerting requirements. |
| 12 | +Flashduty Monitors can replace the alerting capabilities of products like Nightingale, vmalert, and elastalert. The Monitors alerting engine is designed to be extremely flexible and deeply integrated with On-call products, capable of meeting various complex alerting requirements. |
13 | 13 |
|
14 | | -## Alert Engine (Monitors) Architecture Design |
| 14 | +## Alerting Engine (Monitors) Architecture Design |
15 | 15 |
|
16 | | -Flashduty is a SaaS service that cannot access data sources within users' private networks from the SaaS side. Therefore, the Alert Engine (Monitors) consists of two parts: |
| 16 | +Flashduty is a SaaS service that cannot access data sources within users' private networks from the SaaS side. Therefore, the Alerting Engine (Monitors) consists of two parts: |
17 | 17 |
|
18 | 18 | - **SaaS Server**: Responsible for managing alert rules and permissions |
19 | 19 | - **monitedge**: Deployed within users' private networks, synchronizes alert rules from SaaS, performs periodic data queries and threshold evaluation, generates alert events and pushes them to the SaaS side |
20 | 20 |
|
21 | 21 | The architecture diagram is shown below: |
22 | 22 |
|
23 | | - |
| 23 | + |
24 | 24 |
|
25 | 25 | The diagram assumes that the customer has two data centers, East US and South China. Each data center has a `monitedge` instance deployed, responsible for alert evaluation of data sources within their respective data centers and pushing alert events to the SaaS side. |
26 | 26 |
|
27 | 27 | If you only have one data center, or if the network quality between data centers is good, you can also deploy only one `monitedge` instance to handle alert evaluation for all data sources. |
28 | 28 |
|
29 | 29 | If you are concerned about single point of failure risks when deploying one `monitedge`, you can also deploy multiple `monitedge` instances to form a cluster. For example, deploy 2 `monitedge` instances in the East US data center to form a cluster, setting the same cluster name through the `--alerter.clusterName meidong` parameter when starting the instances; deploy 2 `monitedge` instances in the South China data center to form another cluster, setting another cluster name through the `--alerter.clusterName huanan` parameter when starting these two instances. |
30 | 30 |
|
31 | | -Multiple instances in an alert engine cluster will automatically shard the processing of alert rules. For example, if this cluster needs to process 100 alert rules, the system will automatically balance the load, allowing each `monitedge` instance to process 50 rules respectively. If one instance fails, another instance will take over the processing of all 100 alert rules, ensuring high availability while avoiding duplicate alert event delivery. |
| 31 | +Multiple instances in an alerting engine cluster will automatically shard the processing of alert rules. For example, if this cluster needs to process 100 alert rules, the system will automatically balance the load, allowing each `monitedge` instance to process 50 rules respectively. If one instance fails, another instance will take over the processing of all 100 alert rules, ensuring high availability while avoiding duplicate alert event delivery. |
0 commit comments