This repository has no description
configs.monitoring: match only systemd's own unit failure messages
SystemdUnitFailed matched any line containing "Failed with result", so a
VictoriaLogs warning echoing a rejected query fired it for
victorialogs.service. Anchor a regexp on _msg to systemd's
"<unit>: Failed with result '<result>'." form.
author
Hermes
committer
lassulus
date
(Oct 16, 2026, 2:24 PM CEST)
commit
3a9014f4
3a9014f48400a208b4a669fef56b6c9b9c8cbfc1
parent
3106c53d
3106c53dd4588d1a2df365d9f1e89d31c7bad64e
+4
-1
+4
-1
configs/monitoring/alerts.nix
+4
-1
configs/monitoring/alerts.nix
···
88
88
type = "vlogs";
89
89
interval = "1m";
90
90
rules = [
91
+
# systemd logs "<unit>: Failed with result '<result>'."; the anchored
92
+
# regexp skips lines merely quoting the phrase, such as VictoriaLogs
93
+
# warnings that echo a rejected query.
91
94
(alert "SystemdUnitFailed"
92
-
''_time:15m "Failed with result" | stats by (host, unit) count() as failures''
95
+
''_time:15m "Failed with result" _msg:~"^[^ ]+: Failed with result '" | stats by (host, unit) count() as failures''
93
96
"0m"
94
97
"{{ $labels.unit }} failed on {{ $labels.host }}"
95
98
)