View Alert History
Last update：2025-08-15 15:55:28
The Alert History page records all triggered alert events and their complete lifecycle. When a security incident occurs, you can determine priorities based on alert levels and review alert details to understand the attack. After an incident ends, the alert history can be used to trace the root cause, assess response efficiency, and provide data support for optimizing monitoring strategies.
Go to Alert History：
- Log in to the CDNetworks Console, find the security product in use under Subscribed Products.
- Go to Analysis & Logs > Alert History.
Filter Events
An alert event record documents the entire process of an alert rule from its initial trigger to its final clearance. By default, the page displays the alert history generated Today, listed in reverse chronological order by First Trigger Time, with the most recent alert event at the top. Users can filter alerts by time range, alert status, and alert level, or perform a precise search in the search box using alert ID, alert rule name, or alert target. The filtering options and details are as follows:
| Filter Criteria | Description |
|---|---|
| Time Range | When setting the alert history search period, you can view up to 6 months of alert history. |
| Alert Status | Filter history by alert status. Available statuses are: Alerting: Indicates the time period during which the alert condition persists after its initial trigger. Cleared: The alert will be cleared when the metrics that triggered the alert continuously meet the recovery conditions. Expired: If the associated rule is deleted, edited, or disabled while the alert is active, or if the monitoring object is removed, the event becomes invalid. The alert details of this event cannot be viewed in this case. |
| Alert Level | Filter alarm history by severity levels. Available levels include: Emergency, Critical, Warning |
View Alert Details
On the Alert History page, click the alert details icon in the list to view the details of the event. The detailed information and related descriptions are as follows:
| Detailed Information | Description | |
|---|---|---|
| Alert Information | Alert ID | Each alarm event is associated with a unique ID. |
| First Trigger Alert Time | The time when the alert was first triggered in this event.
|
|
| Last Trigger Alert Time | The time when the last alert was triggered in this alert event. | |
| Duration | The current duration of this event. | |
| Alert Recovery Time | The time when this event is cleared. | |
| Time Zone | Time zone set by the system.Note: The actual alert notification time is generated based on the time zone configured in the alert rule; the time zone displayed in the alert details follows the system-wide global setting. |
|
| Trigger Alert Rule | Name of the rule that triggered this alert event. Click to jump directly to the rule details page. | |
| Alert Object | Alert Object | The monitor that triggered this alert event. |
| Alert Details | Trigger Alert Content | Specific trigger information for each record, including filtered fields and triggered metric values. |
| Trigger Alert Time | The trigger time for each triggered record. | |