# Anomaly notifications are not received

**URL:** <https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042>\
**Category:** APM\
**Tags:** elastic-stack-machine-learning, elastic-stack-alerting, dotnet\
**Created:** [February 22, 2021, 8:43am UTC](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042 "2021-02-22T08:43:20Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![insanity13](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/insanity13/32/57444_2.png) [@insanity13](https://discuss.elastic.co/u/insanity13)\
**Post date:** [February 22, 2021, 8:43am UTC](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042/1 "2021-02-22T08:43:20Z")

</div>

Elastic Cloud 7.11  
Created "Anomaly Alert" for Web Application (to Send Slack notification).  
No notification has been sent  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/c/9c4b856d872f30e8eb2facfd561e4acc218e8336.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/6/d6f9371d0752cb3c300531de523a29ee3ff1307a.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/5/05f45b18d032cb8d085901b2990fd615b79d08ed.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/d/dd32ca0e09d7cc6a0586fac00f1fcbbe8044577d.png)

---

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [February 24, 2021, 5:09pm UTC](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042/2 "2021-02-24T17:09:38Z")

</div>

Alerts are for real-time operation. The anomaly shown is from 8 months ago.

When you enable alerting on ML anomalies, they are for anomalies that are emerging in real-time. The alert logic only looks back for a short window of time so that it only picks up newly created anomalies.

---

<div class="post-metadata">

**Author:** ![insanity13](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/insanity13/32/57444_2.png) [@insanity13](https://discuss.elastic.co/u/insanity13)\
**Post date:** [February 25, 2021, 4:46am UTC](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042/3 "2021-02-25T04:46:58Z")

</div>

I agree that the screenshot is incorrect.  
Anomaly alerts are not received - a fact.  
They were created long ago. Since then, there have been several critical points of degradation and not a single notification has come.  
Only notifications by the errors count work well. And the funny thing is that they are not displayed in the "Alerts and Actions" section, they in the "Watcher" section.

And I don't understand how to manage Alerts all.  
Creation is easy and convenient. And then you can only do Mute or Delete. You cannot check or change the conditions. And you cannot trace the Alert. They are completely unrelated.

I also want to see created notifications immediately in the "Alerts" list and not by clicking the "View Active Alerts" button. And "Latency / Error Count / etc" actions move in the action "Create", Alerts are usually created less often than viewed.  
 ![Capture](https://us1.discourse-cdn.com/elastic/original/3X/2/9/296103d53018e69d44d19522113d729fedb83df0.png)

---

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [February 25, 2021, 12:20pm UTC](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042/4 "2021-02-25T12:20:35Z")

</div>

This is really useful information, Mikhail. Thank you for the clarification!

I've reported this internally to the APM team and they're currently looking into this to see if there's some type of bug at play here that's preventing the real-time notification from happening. Stay tuned.

---

<div class="post-metadata">

**Author:** ![dgieselaar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgieselaar/32/46947_2.png) [@dgieselaar](https://discuss.elastic.co/u/dgieselaar)\
**Post date:** [February 25, 2021, 4:39pm UTC](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042/5 "2021-02-25T16:39:39Z")

</div>

@insanity13 thanks for your report - I've opened an issue for the anomaly alert: [[APM] APM Anomaly alert type might miss anomalies · Issue #92839 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/92839). There is also an open issue for the ability to edit alerts: [[APM] Add ability to edit APM alerts · Issue #76316 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/76316).

---

<div class="post-metadata">

**Author:** ![insanity13](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/insanity13/32/57444_2.png) [@insanity13](https://discuss.elastic.co/u/insanity13)\
**Post date:** [February 26, 2021, 4:27am UTC](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042/6 "2021-02-26T04:27:24Z")

</div>

Thanks a lot!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 19, 2021, 12:28am UTC](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042/7 "2021-03-19T00:28:07Z")

</div>

This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.
