Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.siftstack.com/llms.txt

Use this file to discover all available pages before exploring further.

When you open a Rule in a Report, the chart section displays the channel telemetry associated with the Rule and its Annotations. If the Rule includes more than one channel, Sift determines the default chart format based on the channel types. You can switch between formats using the controls in the chart interface.

Chart formats

Switching between formats

  • To merge strip charts into a single chart: click Merge charts.
  • To split a merged chart back into strip charts: click Split charts.

Log channel behavior

If a Rule includes a log-type channel, the chart and the Log Viewer appear together in the Rule view. The Log Viewer shows the exact log entries that caused the Rule’s condition to evaluate to true; for example, when an expression like contains(sys_log, "failure") fires. When a Rule includes both numeric and log channels, the time-series chart and the Log Viewer are displayed side by side so you can examine both the quantitative data and the log context at the same time.

Keyboard navigation

To move through Rules in a Report without using the mouse:
  • Press Shift + to go to the previous Rule.
  • Press Shift + to go to the next Rule.

Edge cases and limitations

  • The merge option applies to numeric channels only. Log channels always appear in the Log Viewer regardless of whether charts are merged or split.
  • If a Rule includes only one channel, it is displayed as a single chart with no strip chart or merge option.