Investigation

When you get an anomaly alert, Edgenivo Agent can investigate your logs and metrics to help you find the root cause. Edgenivo Agent displays anomaly highlights in the Edgenivo dashboard.

Edgenivo Agent automatically investigates Medium and High anomaly alerts. Low-severity alerts do not start automatic investigations. Monitor severity settings control notifications and do not affect investigation eligibility.

Before you use Edgenivo Agent Investigation, make sure your team has:

1. An Observability Plus subscription. It includes 10 alert investigations per billing cycle by default
2. Edgenivo Agent billing enabled for investigations beyond the included usage

To run investigations automatically for eligible alerts, enable Edgenivo Agent Investigations for your team.

You can run an investigation manually if you want to investigate an alert that has already fired.

To run investigations automatically for eligible alerts, enable Edgenivo Agent Investigations in your team's settings:

1. Go to your team's Settings page.
2. In the General section, find Edgenivo Agent and under Investigations, switch the toggle to Enabled.
3. Under Projects to Investigate, choose All projects or Specific projects. If you choose Specific projects, select the projects that Edgenivo Agent should investigate.
4. Select Save to confirm your changes.

After you enable Edgenivo Agent Investigations, Edgenivo Agent runs an investigation automatically for eligible alerts. Make sure your team has Edgenivo Agent billing enabled for investigations beyond the included usage.

When you enable Edgenivo Agent Investigations, Edgenivo Agent runs an investigation automatically for eligible alerts. It queries your logs and metrics around the time of the alert, looks for patterns that might explain the issue, checks for related errors or anomalies, and summarizes what it found.

To view an investigation:

1. Go to your Edgenivo dashboard and navigate to Observability, then Alerts.
2. Find the alert you want to review and click on it.
3. Review the investigation results alongside your alert details. If the investigation is still running, you can see the analysis stream in real time.

If you want to run the investigation again with fresh data, click the Rerun button.

If you do not have Edgenivo Agent Investigations enabled and running automatically, you can run an investigation manually from the alert details page.

1. Go to your Edgenivo dashboard and navigate to Observability, then Alerts.
2. Find the alert you want to review and click on it.
3. Click the Investigate (or Rerun) button to run an investigation manually.

Observability Plus includes 10 investigations per billing cycle. Additional investigations use provider inference at the underlying token rate with no markup, plus the Edgenivo Token Rate of $0.25 per million tokens. The cost varies based on how much log and metric data Edgenivo Agent analyzes.

See Edgenivo Agent pricing for complete rates and cost-tracking information.

To disable Edgenivo Agent Investigation:

1. Go to your team's Settings page.
2. In the General section, find Edgenivo Agent and under Investigations, switch the toggle to Disabled.
3. Select Save to confirm your changes.

Once disabled, Edgenivo Agent Investigation won't run automatically on any new alerts. You can re-enable Edgenivo Agent Investigation at any time from the same menu or run an investigation manually from the alert details page.