Docs

Torch Log Service

Alarm

Alarm overview

TLS provides a one-stop monitoring and alarm solution. TLS alarm supports real-time data monitoring, alarm policy, and channel management, making it suitable for operations and maintenance scenarios.

How it works

Description

The TLS alarm feature is currently in public beta, and no service fees are charged for SMS or voice notifications. For the end date of the alarm beta and billing policy, see future product announcements.

In enterprise-level O&M scenarios, after collecting and storing massive log data in TLS, you can use the alarm function to monitor various application metrics in real time and manage alarm processes. To use TLS alarm, you need to configure alarm policies and notification groups for specified log topics. TLS runs the monitoring tasks on a scheduled cycle based on the alarm policy, performs query and analysis on the monitored data, and sends alarm notifications to specified recipients if the results meet trigger conditions.

TLS alarm offers the following features:

Real-time data monitoring: TLS provides real-time log data monitoring based on query and analysis. You can set up query and analysis statements in alarm policies, and TLS will run these statements periodically to monitor changes in analysis results. Query and analysis statements must follow TLS syntax. For details, see Query syntax and Log analysis.

Alarm policy management: TLS supports setting alarm rules based on real-time log data monitoring results to monitor the service status. The alarm policy determines the scope of data monitoring, the conditions for triggering alarms, and notification methods.

Notification group management: TLS centrally manages alarm notification channels through notification groups. When an alarm policy is linked to a notification group, alarm notifications are sent to all recipients defined in the group, ensuring timely delivery of alarm information and rapid service recovery. Supported channels include email, SMS, phone call, Feishu, WeCom, DingTalk, and custom Webhooks.

Alarm notification: You can set regular strings as notification content, or design customized notifications using content syntax, functions, and variables to provide clear and detailed alarm information in the notification.

Enable alarm capability: TLS supports integration with third-party alarm services. For example, you can use the monitoring tool integration feature of RuiXiangCloud Intelligent Alarm Platform Cloud Alert to connect third-party alarm platforms. Manage alarm events for TLS through RuiXiang Cloud for streamlined alarm workflow management.

Limits

Category	Limitations	Description
Alarm monitoring	Number of alarm policies	Up to 100 alarm policies can be created in each project. Up to 10 alarm policies can be created in each log topic.
		Length of field value	If the value of a field exceeds 1024 characters, only the first 1024 characters are used for analysis.
		Time range of query and analysis	The time span of each query and analysis statement must not exceed 24 hours.
		Query and analysis results	When there is no set operation, the monitoring task selects up to the first 1000 rows of data from the query and analysis results for alert triggering; when there is a set operation, the monitoring task selects up to the first 1000 rows of data from the set operation results for alert triggering. When associating three monitoring sets, the monitoring task selects up to the first 100 rows of data from each query and analysis result for set operations.
		Alert expression length	The length range of an alarm expression is 4 to 1024 characters.
notification management	Number of notification groups	Each region can create up to 100 notification groups.
		Number of notification channels	A maximum of 10 notification channels can be added to each notification group.
		Notification content	The maximum length of notification content is 4096 Chinese characters.
		Channel notification frequency	The notification frequency limits for each alert channel of TLS are as follows. Email: unlimited. SMS: The maximum frequency of SMS alert notifications for the same mobile phone number is 10 messages per minute, 100 messages per hour, and 300 messages per day. Phone: The maximum frequency of voice alert notifications for the same mobile phone number is 10 per minute, 100 per hour, and 300 per day. Note Only domestic (+86) phone numbers are supported.

Steps

Create a content template.

A content template is a predefined text template used to specify the content and format of alarm notifications. The content template supports adding variables, functions, and text. TLS supports adding content templates for various notification channels, including email, SMS, phone, Feishu, WeCom, DingTalk, and custom Webhooks. For detailed instructions, see Create a content template.

Create a notification group.

In the notification group, configure the notification type, notification channel, and other settings. If you set the notification channel to Feishu, WeCom, DingTalk, or a custom Webhook, you can manage Webhook addresses through Webhook integration. For detailed instructions, see Create a notification group.

Create an alarm policy.

In alarm policy, the monitoring tasks and alarm rules are required to set, and notification groups need to be bound. The monitoring task defines the monitoring target for alarms, the query and analysis statement, and the execution interval. The alarm rules define the triggering conditions and notification interval. For detailed instructions, see Create alarm policy.

View alarm details.

TLS regularly monitors according to the specified alarm policy. When an alarm is triggered, you can view the details through the login-free link in the notification or check the alarm history in the console. For detailed instructions, see Login-free access to the alarm details page and View alarm history.

Basic concepts

Basic concepts	Description
Alarm policy	The alarm policy defines data monitoring methods and alarm rules. You need to specify the monitoring task, alarm rules, alarm notification methods, and other configurations in the policy.
Notification group	Notification groups are collections of alarm notification policies that define notification types, delivery channels, and receiving objects.
Alarm triggered	Alarm triggering is a type of alarm notification. An alarm notification is sent when the monitoring result meets the alarm triggering expression.
Alarm recovery	An alarm recovery notification is a type of alarm notification. A recovery notification is sent when the monitored object returns to normal.
Content template	An alarm notification content template is a predefined text template that specifies the content and format of alarm notifications. The content template supports adding variables. When the notification is sent, variables are replaced with actual values.
Webhook integration	TLS supports managing alarm notification channels such as Feishu, DingTalk, and WeCom through Webhook integration.

Last updated: 2026.03.31 11:32:38