Monitor service health in the service map

Learn how to monitor the health of services using the service map.

On the service map, the health of a service is represented by a colored ring around the service. The colored ring correlates to the following health statuses.
Health status nameHealth status colorDescription
No health statusGrayThe service has no existing alerts.
WarningYellow

The service:

  • Has at least one minor or warning alert.

  • Has no major or critical alerts.

CriticalRedThe service has at least one major or critical alert.
Health status is determined by the highest severity alert that exists for the service, not the number of alerts that exist for the service.

For example:

  • Consider a service that has 3 minor alerts and 20 info alerts. This service would have a Warning (yellow) health status because it has 0 major or critical alerts and at least 1 minor alert.

  • Consider a service that has 1 critical alert and 4 minor alerts. This service would have a Critical (red) health status since it has at least 1 critical alert.

Service health statuses are based on the alerts triggered by custom and AutoDetect detectors. For more information, see Introduction to alerts and detectors in Splunk Observability Cloud and Intro to AutoDetect alerts and detectors.

View alerts for a service in the service map

Learn how to view alerts for a service in the APM service map.

Complete the following steps to view the alerts for a service in the service map.
  1. Access the service map.
  2. Select a service with a health status, which is represented by a colored ring around the service.
  3. Select the health icon next to the service name. A panel displays with the health status name and a list of the alerts for the service.
  4. Select an alert from the list to view the alert details.