diff --git a/docs/integrations/web-servers/opentelemetry/apache-tomcat-opentelemetry.md b/docs/integrations/web-servers/opentelemetry/apache-tomcat-opentelemetry.md index 6cd45dfe39..f47c32e5a0 100644 --- a/docs/integrations/web-servers/opentelemetry/apache-tomcat-opentelemetry.md +++ b/docs/integrations/web-servers/opentelemetry/apache-tomcat-opentelemetry.md @@ -17,6 +17,10 @@ Tomcat logs are sent to Sumo Logic through the OpenTelemetry [filelog receiver]( Schematics +:::info +This app includes [built-in monitors](#apache-tomcat-alerts). For details on creating custom monitors, refer to [Create monitors for Apache Tomcat app](#create-monitors-for-apache-tomcat-app). +::: + ## Fields Created in Sumo Logic for Tomcat The following are the [Fields](/docs/manage/fields) that will be created as part of the Tomcat App install, if not already present. @@ -379,3 +383,18 @@ Use this dashboard to: The **Apache Tomcat - Connectors** dashboard provides an at-a-glance view of error count, request count, request processing time, total bytes sent/received, total connections, and thread (bust and ideal) information. Threat intel + +## Create monitors for Apache Tomcat app + +import CreateMonitors from '../../../reuse/apps/create-monitors.md'; + + + +### Apache Tomcat alerts + +| Name | Description | Alert Condition | Recover Condition | +|:--|:--|:--|:--| +| `Apache Tomcat - Access from Highly Malicious Sources` | This alert is triggered when a Tomcat server is accessed from highly malicious IP addresses. | Count > 0 | Count < = 0 | +| `Apache Tomcat - Error` | This alert is triggered when error count is greater than 0. | Count > 0 | Count < = 0 | +| `Apache Tomcat - High Client (HTTP 4xx) Error Rate` | This alert is triggered when there are too many HTTP requests (>5%) with a response status of 4xx. | Count > 0 | Count < = 0 | +| `Apache Tomcat - High Server (HTTP 5xx) Error Rate` | This alert is triggered when there are too many HTTP requests (>5%) with a response status of 5xx. | Count > 0 | Count < = 0 |