Docs

Torch Log Service

alarm notification channel

Create notification group

The TLS notification group is a collection of alarm notification channels used to specify action policies when an alarm is triggered. You can add notification rules, and TLS will intelligently assign different alarm notification channels based on these rules. This topic describes the steps to create a notification group.

Prerequisites

If the alarm notification channel is phone, SMS, or email, make sure you have created an IAM user or user group. The IAM user must complete security phone and email verification on the security settings page.

If the alarm notification channel is DingTalk or WeCom and the reminder method is set to specific user, make sure you have created an IAM user or user group. The IAM user must complete security phone and email verification on the security settings page.

Notice

When you set notification method to specified user, the IAM user's mobile number must be a Mainland China number.

If the alarm notification channel is Lark, DingTalk, WeCom, or a custom Webhook, make sure you have created a Webhook integration configuration. For steps, see Create Webhook integration configuration.

When creating a notification group with an IAM user, make sure the IAM user has permission to view other IAM users. The permission policy must include iam:ListUsers.

Background information

TLS manages alarm action policies and notification recipients through notification groups. TLS dynamically assigns different alarm notification channels based on the notification rules and channels defined in the notification group. For example, critical alarms are notified via phone, while other levels are notified via Lark. Alerts triggered outside working hours are sent by email.

The supported notification channels for TLS are as follows:

SMS, phone call, and email: Recipients can be specific IAM users or all users within a designated IAM user group. Alarm notifications are sent via SMS, phone call, or email to the IAM user's mobile phone or email address.

Lark, DingTalk, WeCom, and custom Webhook: Use Webhook integration to configure the robot Webhook address for Lark/DingTalk/WeCom, or other custom Webhook addresses, such as self-built systems or third-party alarm systems like Cloud Alert by RuiXiangyun Intelligent Alarm Platform. After binding the relevant Webhook integration configuration in the notification group, the alarm system sends alarm notifications to the specified Webhook address according to the configuration. For more details, see Create Webhook integration configuration.

Steps

Select the region where log service is located from the top navigation bar.

On the left navigation bar, select Common features > Log alarm > Notification management.

On Notification management page and under Notification group tab, click Create notification group.

Set the notification group name .

Set the notification policy.

The notification policy manages the channels for sending alarm notifications, including notification rules and channels.

Click Add rule.

In the Rule dialog box, add alarm notification rules.

You can specify notification rules by alarm level, alarm policy name, alarm policy name, alarm policy ID, duration, and notification time. You can configure multiple conditions with AND or OR relationships.

Notice

The recovery notification will automatically exclude any additional content you set when creating the alarm policy. You can set the {{NotifyType}} variable in the content template to distinguish between recovery notifications and alert notifications.

Alarms are matched to rules in order from top to bottom. If a rule is satisfied, the corresponding notification channel is used to send the alarm notification.

You can add up to 50 rules in each notification group, and up to 10 notification channels to each rule.

In the Notification channel dialog, set the notification channel.

Configuration	Description
Notification period	The time period during which TLS sends alert notifications. TLS only sends alert notifications if the alert is triggered within the specified notification period.
Channel type	The channel used by TLS to send alarm notifications. After an alarm is triggered, TLS retrieves information about the recipient and sends alarm notifications to this recipient. Supports setting one or more channels. The details are as follows: Default channels: Send alert notifications via email, SMS, phone, and custom Webhook. You can select one or more options. By default, they are all enabled. Lark: Send alert notifications to Lark groups. DingTalk: Send alert notifications to DingTalk groups. WeCom: Send alert notifications to WeCom groups.
Receiving channel	When setting the channel type as a default channel, you need to select one or more receiving channels. Please ensure the specified channel can reach the target users. You can also verify the accessibility of the receiving channel through the alert test function when creating an alarm policy. Email: Send alert notifications to IAM users or user groups via email. Notice The domain name for TLS alert emails is mail.tls.volcengine.com. You can add this domain to the allowlist of the target mailbox to prevent alert emails from being blocked. SMS: Send alert notifications to IAM users or user groups via text message. Phone: Send alert notifications to IAM users or user groups via phone call. Notice If the call is not answered, it will not be redialed, and a free SMS notification will be sent once. TLS uses 02132222528 and 02132222527 to send alert notifications. You can add these numbers to your phone's allowlist to prevent alert calls from being blocked. Custom Webhook: Send alert notifications to a specified Webhook address.
Recipients	Set the channel type to default channel. You need to configure this setting if the receiving channel includes any of email, SMS, or phone. IAM users or user groups that receive alert notifications. If a user group is specified, the alert notification will be sent to all IAM users in this notification group. For details, see User group management.
Webhook	Set the channel type to default channel, and ensure the receiving channel includes Custom Webhook. Or, you need to configure this setting if the channel type is set to Lark, DingTalk, or WeCom. You can click Create to create a new Webhook integration configuration, or click the Webhook dropdown box to select an existing Webhook integration configuration. For more details, see Create Webhook integration configuration.
Content template	The specific content of the alarm notification. TLS will send alarm notifications according to the content defined in the template. You can click Create to add a new content template or select an existing content template from the dropdown list. For more details, see Create content template. Notice When setting the reminder method to everyone or designee, notifications on WeCom will be in plain text format and do not support Markdown.
Alert method	When the Channel type is set to Lark, DingTalk, or WeCom, you need to set an alarm alert method. No reminder: Only send alarm notifications to Lark, DingTalk, or WeCom groups. All members: Send alarm notifications to Lark, DingTalk, or WeCom groups and notify all group members to review the alarm notification. Specified individuals: Send alert notifications to DingTalk or WeCom groups and notify the designated group members to review the alert. Personnel can be specified only when Channel type is set to DingTalk or WeCom; you can designate corresponding IAM users or groups. The mobile number for IAM users must be a mainland China number.

Select Project.

In the dropdown list, select the IAM project associated with the notification group you’re creating.

If you have not created any IAM projects or have no suitable IAM projects to select, click Create new project to create a new IAM project. If you do not specify an IAM project, TLS adds the notification group to the IAM project named default.

Click Create Notification group.

Configuration example

Notification scenarios

For serious alarm, the alert is delivered by phone; for other alarm levels, the alert is delivered via Lark notification.

Notification policy configuration

Related operations

Disable recovery notifications:

By default, TLS sends alert and recovery notifications to the specified channel. If you do not want to receive recovery notifications, you can disable them by creating or editing the alarm policy. For details, see How to turn off alarm recovery notifications?.

Last updated: 2026.04.23 17:57:38