From aeeaf877ac93e80b2bd486f70fff115e4911f264 Mon Sep 17 00:00:00 2001
From: Yurii Kravets <30324382+YuriKravetc@users.noreply.github.com>
Date: Mon, 20 Jun 2022 17:44:47 +0300
Subject: [PATCH] Changed the level type in alerts.yml for TooManyLogs alert
 (#2760)

alerts: filter out non error log messages for `TooManyLogs`

Info and Warn error levels aren't always a result of malfunctioning
or faulty state. So we filter them out.
---
 deployment/docker/alerts.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deployment/docker/alerts.yml b/deployment/docker/alerts.yml
index 2ea932ba93..fd95441ff2 100644
--- a/deployment/docker/alerts.yml
+++ b/deployment/docker/alerts.yml
@@ -125,7 +125,7 @@ groups:
             When VictoriaMetrics constantly hits the limit it means that storage is overloaded and requires more CPU."
 
       - alert: TooManyLogs
-        expr: sum(increase(vm_log_messages_total{level!="info"}[5m])) by (job, instance) > 0
+        expr: sum(increase(vm_log_messages_total{level="error"}[5m])) by (job, instance) > 0
         for: 15m
         labels:
           severity: warning