Learn how to view events and about event types.

An event is a record that something of interest has occurred—an alert has changed state, a maintenance window has been created, AWS instances have started or stopped, and so on.

You can display events as overlays on a chart using events queries.

Viewing Events

To view events, select Browse > Events. The Events list displays. Here is an example entry when the alert described in Tutorial: Getting Started fires:

Alert firing

Event Sources and Types

Events have three types of sources. When an alert fires or resolves, the source is System/Alert. When you perform actions in Wavefront, such as when you edit or snooze an alert or when newly affected sources fail or recover from an alert condition, the source is System.

Events system

To identify user actions, such as code pushes, that occur outside Wavefront but that affect metrics within Wavefront, you can manually create events with source User .

Events system

Events also have types and subtypes, which are typically used in events queries.

Viewing System Event Details

To view details about an alert associated with a System/Alert event, click the View System Event and then View Alert links in the System/Alert event or the View Alert in a System event. You see a chart with the following queries:

  • <Alert name> - the alert condition.
  • Alert Firings - an events() query that shows events of type alert for the alert. These are events when alerts are open and are resolved.
  • Alert Details - an events() query that shows events of type alert-detail for the alert. These are events when sources are failing or recovered.
  • Alert Data - a query for alert metrics.

Alert notification

Searching Events

While some Wavefront instances can have hundreds of dashboards, typical Wavefront users use a smaller subset of dashboards each day. This makes the ability to quickly search for relevant dashboards vital. Wavefront offers many features to help you organize and search for dashboards.

Event States

A System event can be in the Ongoing or Ended state. System/Alert events are Ongoing until all affected alert sources are recovered and the alert is resolved, after which the state is Ended.

A User event can be in the Pending, Ongoing, or Ended state. A User event whose start time is in the future has the state Pending.

AWS Events

The Wavefront CloudTrail integration retrieves EC2 event information and creates Wavefront System events that represent the EC2 events. For details, see CloudTrail Integration.