Configuring and managing alerts
You can configure multiple alerting configurations including an unlimited number of alert channels to be notified through.
To filter the events on which to be alerted, select one or more event or event types of interest. Events can be further filtered by specifying the scope of the alert, such as by specifying a Dynamic Focus query or a given Application Perspective name.
For more information about add alerts for websites, see SmartAlerts for Websites.
Configure an Alert
- On the sidebar, click Settings.
- Click

- Enter a unique and descriptive Name for your alert.
- Select the Eventsto be alerted about:
- Alert on event(s): Click Add events to explicitly select the events to be alerted about. Preconfigured events are available for selection in the Events table and can be filtered by:
- Type: Built-in or custom events.
- Incidents & Severity: Incidents, Warning, or Critical.
- Entity type: Monitored technology currently supported.
- State: Enabled or disabled.
- Free-text filter (Search)
Note: Deleting all events linked to an alert would also delete the alert. This is done to avoid stale alert configurations.
- Alert on event type(s): Select the event types that you want to be alerted for from the available list. Any event matching one of the selected types triggers an alert, assuming it matches the configured scope. The following types can be selected:
- Incidents
- Critical issues
- Warning issues
- Changes
- Online
- Offline
- Monitoring issues
- Alert on application Smart Alert(s): Click Add Smart Alerts to explicitly select the Smart Alerts to be alerted about. Preconfigured Smart Alerts are categorized by Global Application Smart Alerts and Application Smart Alerts. Both types of Smart Alerts can be filtered by using the Search (free-text filter) field.
Select the required alerts and click Select Smart Alerts.
- Alert on event(s): Click Add events to explicitly select the events to be alerted about. Preconfigured events are available for selection in the Events table and can be filtered by:
- Select a Scope to filter the events further.
- Application perspective: Select a particular Application by clicking Add application perspectives. For example, to be notified for events of the application
App Test, select the applicationApp Testfrom the list of currently configured applications and click Add. - Selected entities only (Dynamic Focus Query): Filter for specific events based on a Dynamic Focus query by configuring a query the query. For example, to be notified of events affecting the
prodzone of the monitored system, specify the queryentity.zone:prod. - All available entities: All events that match the event types riteria in section 2 will trigger an alert, regardless of on which entity they are detected. For large systems this option can lead to many alerts being sent out. An estimate of the number of events matching the configuration can be found just as follows the drop-down.
- Application perspective: Select a particular Application by clicking Add application perspectives. For example, to be notified for events of the application
- Configure the Alertingdetails. Select which alert channels are to be notified about the alert and select whether the entity name is to be included in the alert title.
- Click Add alert channels to select from the list of preconfigured channels. When you have selected the required channels, click Add. For more information about creating an alert channel, see Setting up alert channels.
- Select Include entity name in alert title under Alert Title to add more context to any created alert by including the name of the entity that triggered the event in the alert title.
- (Optional) Include any extra Custom payloads to the alert notification.
- Global custom payloads are configured on a separate page in the Settings. These payloads are included in all notifications with the matching key-value pairs. For more information, see Configure Custom Payload Globally.
- For Alert-specific custom payloads, click Add row to configure the key and value pairing for the payload. Alert-specific custom payloads support the following value types:
- Static: A fixed textual value
- Dynamic: Dynamic values that can be either tags or metrics:
- Tags: Tag-based dynamic values (similar to global custom payload configuration)
- Metrics: Time-series metric values from infrastructure or application sources. For more information, see Metric-based custom payloads
Both global custom payloads and alert-specific custom payloads are included in alert notifications if applicable. However, alert-specific configuration has priority over the global configuration. As a result, if both configurations use the same key, the alert-specific custom payload value overrides the global custom payload.

- Click Create to save the new alert.
Metric-based custom payloads
Alert-specific custom payloads can include time-series metric values from both infrastructure and application sources. You can include current metric values (such as CPU usage, memory consumption, application call counts, or latency) directly in your alert notifications, providing immediate context about the system state when the alert triggered.
Configuring metric-based custom payloads
When you select Dynamic as the value type and then choose Metrics as the dynamic type for a custom payload entry in an alert configuration, you can configure the following details:

- Entity type selection: First, select an entity type from either infrastructure or application sources:
- Infrastructure entity types: Hosts, containers, databases, Kubernetes resources, and other monitored infrastructure components
- Application entity type: Application (a single type that encompasses all application-level monitoring)

- Metricselection: After selecting an entity type, choose from the available metrics for that entity type:
- Infrastructure metrics: CPU usage, memory consumption, disk I/O, network traffic, and other infrastructure-specific metrics depending on the selected entity type
- Application metrics: When the Application entity type is selected, all metrics from applications, services, and endpoints are available for selection, including call count, latency, error rate, and trace count

- Time Window: Specify the time period over which the metric should be aggregated. Available options range from 1 second to 1 hour:
- 1 second, 5 seconds, 10 seconds, 30 seconds
- 1 minute, 2 minutes, 5 minutes, 10 minutes, 30 minutes
- 1 hour
How metric-based custom payloads work
- Fetch the metric value for the specified time window ending at the alert trigger time.
- If the metric is not available on the alerting entity, search related entities in the Dynamic Graph to find the metric value.
- Include the formatted metric value in the alert notification.
For example, if you configure a metric-based custom payload for CPU usage with a 5-minute time window, when an alert triggers at 10:30 AM, Instana fetches and includes the average CPU usage from 10:25 AM to 10:30 AM.
Example use cases
- Include current CPU usage when a host alert triggers
- Add memory consumption metrics to container alerts
- Include disk I/O metrics for database alerts
- Add current call count to application performance alerts
- Include error rate in application error alerts
- Add latency percentiles (P95, P99) to performance degradation alerts
- Include container metrics when a pod alert triggers
- Add host metrics when a container alert triggers
- Include related service metrics in application alerts
Metric value format
Metric values are included in alert notifications as formatted numbers with two decimal places. If a metric value cannot be retrieved (for example, if the metric does not exist or the query times out), the value N/A is included instead.
Alert notifications
- Event ID
- Event type
- Event status (open, closed)
- Event text and details
- Link to Instana
- Start time
- Severity
- Built-in payload: Textual values that are included in all alert notifications when available:
- Host FDQN and tags
- Host tags
- Custom or availability zone
- Container names
- Custom payload: User defined list of static or dynamic payload attributes to be included in all alerts if applicable. Check out the Custom Payload documentation for more details about how to configure custom payload in alerts.