Deep Dive: Monitoring Anomalies with Grok
How does Grok detect incidents using performance data from your IT environment?
As soon as you add a monitoring target to Grok, the platform will begin building cognitive models on each metric provided, providing insights as soon as it has grokked enough information from the service. Any detected anomalies will appear on the charts page.
The charts view lets you view all monitored services, with the option to organize the page with sorting and filtering options. The page is useful to those who want an at-a-glance view of the current health of their services as required by the team. Clicking on the blue bar collapses the chart so you can focus on the metrics you wish to have open for further analysis.
Anomalies detected across each metric are aggregated to provide a quick view of the health of a given service, and selecting one of these charts reveals the individual metric charts for further analysis of the detected issue. For example, this chart shows a test WordPress instance with a detected issue that is the result of an anomaly detected on both the CPU utilization and network traffic metrics.
Since Grok learns the typical traffic patterns of a service, this behavior might be due to a sudden spike in traffic, or it could be due to an erroneous code push. If Grok is monitoring the front-end traffic via the metric streamer, then you can quickly verify if this was due to a traffic spike vs. a potential incident. Regardless, the behavior was deemed abnormal despite knowing the context of the service’s behavior since it was monitored by the platform.
If your company uses a custom web dashboard, you can embed the chart using HTML. We will generate code that only works with a specific URL, so your data is secure so long as the web destination chosen is secure as well.
We hope the Grok dashboard and chart views provide a simple way to monitor the health of your environment(s), and we look forward to future ideas on how to expand the capability further. Our goal was to make a simple experience to begin understanding an environment quickly, without requiring a data science background. With the Grok API, you can retrieve data from your environment for use in other tools as well. Let us know what monitoring and analysis tools you use with Grok data in the comments!