--- title: "Create monitor" method: POST path: "/v1/projects/{projectSlug}/monitors" tags: ["Monitors"] --- # Create monitor `POST /v1/projects/{projectSlug}/monitors` Creates a monitor with one rule. The slug is derived from `name`. ## Path parameters - `projectSlug` string, required — Project slug (human-readable identifier) ## Request body - union - object - `name` string, required — Human-readable name. Used to derive the slug. - `description` string — Optional free-form description. - `target` object, required — Entity or filter set watched by the monitor. - `type` 'savedSearch' | 'tool' | 'user' | 'session', required — Product target category: `savedSearch`, `tool`, `user`, or `session`. - `id` string, nullable, required — Target entity id, or `null` for project-wide targets. - `filterSet` MonitorFilterSet — Additional filters applied when evaluating the monitor. - `query` string, nullable — Semantic query applied when evaluating inline trace targets. - `kind` 'savedSearch' | 'tool' | 'user' | 'session' — Normalized target kind returned on persisted monitors. - `stream` 'traces' | 'spans' | 'sessions' — Telemetry stream evaluated by the monitor. - `savedSearchId` string, nullable — Saved-search id for saved-search monitors, or `null` for inline targets. - `metric` union - object — Default metric evaluated for this target. - `kind` 'count', required — Count matching events in each evaluation bucket. - object — Default metric evaluated for this target. - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object — Default metric evaluated for this target. - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object — Default metric evaluated for this target. - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - `severity` 'low' | 'medium' | 'high', required — Severity assigned to incidents opened by this monitor. - `trigger` 'match', required — Opens a point incident when any matching event appears. - `metric` union - object — Metric stored for later rule edits. Match monitors evaluate counts. - `kind` 'count', required — Count matching events in each evaluation bucket. - object — Metric stored for later rule edits. Match monitors evaluate counts. - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object — Metric stored for later rule edits. Match monitors evaluate counts. - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object — Metric stored for later rule edits. Match monitors evaluate counts. - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric stored for later rule edits. Match monitors evaluate counts. - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric stored for later rule edits. Match monitors evaluate counts. - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric stored for later rule edits. Match monitors evaluate counts. - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric stored for later rule edits. Match monitors evaluate counts. - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object - `name` string, required — Human-readable name. Used to derive the slug. - `description` string — Optional free-form description. - `target` object, required — Entity or filter set watched by the monitor. - `type` 'savedSearch' | 'tool' | 'user' | 'session', required — Product target category: `savedSearch`, `tool`, `user`, or `session`. - `id` string, nullable, required — Target entity id, or `null` for project-wide targets. - `filterSet` MonitorFilterSet — Additional filters applied when evaluating the monitor. - `query` string, nullable — Semantic query applied when evaluating inline trace targets. - `kind` 'savedSearch' | 'tool' | 'user' | 'session' — Normalized target kind returned on persisted monitors. - `stream` 'traces' | 'spans' | 'sessions' — Telemetry stream evaluated by the monitor. - `savedSearchId` string, nullable — Saved-search id for saved-search monitors, or `null` for inline targets. - `metric` union - object — Default metric evaluated for this target. - `kind` 'count', required — Count matching events in each evaluation bucket. - object — Default metric evaluated for this target. - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object — Default metric evaluated for this target. - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object — Default metric evaluated for this target. - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - `severity` 'low' | 'medium' | 'high', required — Severity assigned to incidents opened by this monitor. - `trigger` 'threshold', required — Opens a point incident when the condition is met. - `metric` union - object — Metric evaluated by the monitor rule. - `kind` 'count', required — Count matching events in each evaluation bucket. - object — Metric evaluated by the monitor rule. - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object — Metric evaluated by the monitor rule. - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object — Metric evaluated by the monitor rule. - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by the monitor rule. - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by the monitor rule. - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by the monitor rule. - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by the monitor rule. - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - `condition` object, required — Threshold condition that opens point incidents. - `trigger` 'threshold', required — Opens once the measured value crosses the threshold. - `metric` union, required — Metric measured over the monitor target. - object - `kind` 'count', required — Count matching events in each evaluation bucket. - object - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - `threshold` union, required — How the metric is compared. - object - `mode` 'absolute', required — Compare the metric against a fixed value; read `value`. - `value` number, required — Metric value that opens the incident. - object - `mode` 'multiplier', required — Compare the metric rate against `factor × baseline`; read `factor` and `baseline`. - `factor` number, required — Multiple of the baseline rate that opens the incident (e.g. `3` = 3×). - `baseline` AlertBaseline, required — Fixed-window baseline the current rate is compared against. - `kind` 'average' | 'period', required — How the comparison rate is computed. `average` is the rolling rate over the last `lookback`; `period` is the equal-length window immediately before it (e.g. `lookback` of 1 day compares against yesterday) for daily/weekly seasonality. - `lookback` union, required — Length of the window used to compute the baseline rate. - … - object - `mode` 'expected', required — Compare against the seasonally-learned expected value for this time of day/week. - `sensitivity` integer — Detector sensitivity from 1 (noisiest) to 6 (strictest). Defaults to 3 when omitted. - `direction` 'above' | 'below' — Direction that opens the incident. Defaults to `above` when omitted. - object - `name` string, required — Human-readable name. Used to derive the slug. - `description` string — Optional free-form description. - `target` object, required — Entity or filter set watched by the monitor. - `type` 'savedSearch' | 'tool' | 'user' | 'session', required — Product target category: `savedSearch`, `tool`, `user`, or `session`. - `id` string, nullable, required — Target entity id, or `null` for project-wide targets. - `filterSet` MonitorFilterSet — Additional filters applied when evaluating the monitor. - `query` string, nullable — Semantic query applied when evaluating inline trace targets. - `kind` 'savedSearch' | 'tool' | 'user' | 'session' — Normalized target kind returned on persisted monitors. - `stream` 'traces' | 'spans' | 'sessions' — Telemetry stream evaluated by the monitor. - `savedSearchId` string, nullable — Saved-search id for saved-search monitors, or `null` for inline targets. - `metric` union - object — Default metric evaluated for this target. - `kind` 'count', required — Count matching events in each evaluation bucket. - object — Default metric evaluated for this target. - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object — Default metric evaluated for this target. - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object — Default metric evaluated for this target. - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - `severity` 'low' | 'medium' | 'high', required — Severity assigned to incidents opened by this monitor. - `trigger` 'escalating', required — Opens and closes a sustained incident while the condition is met. - `metric` union - object — Metric evaluated by the monitor rule. - `kind` 'count', required — Count matching events in each evaluation bucket. - object — Metric evaluated by the monitor rule. - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object — Metric evaluated by the monitor rule. - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object — Metric evaluated by the monitor rule. - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by the monitor rule. - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by the monitor rule. - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by the monitor rule. - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by the monitor rule. - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - `condition` object, required — Escalating condition that opens sustained incidents. - `trigger` 'escalating', required — Opens when the monitor target is escalating or sustained. - `metric` union, required — Metric measured over the monitor target. - object - `kind` 'count', required — Count matching events in each evaluation bucket. - object - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - `threshold` union - object — How the metric is compared when threshold-based. - `mode` 'absolute', required — Compare the metric against a fixed value; read `value`. - `value` number, required — Metric value that opens the incident. - object — How the metric is compared when threshold-based. - `mode` 'multiplier', required — Compare the metric rate against `factor × baseline`; read `factor` and `baseline`. - `factor` number, required — Multiple of the baseline rate that opens the incident (e.g. `3` = 3×). - `baseline` AlertBaseline, required — Fixed-window baseline the current rate is compared against. - `kind` 'average' | 'period', required — How the comparison rate is computed. `average` is the rolling rate over the last `lookback`; `period` is the equal-length window immediately before it (e.g. `lookback` of 1 day compares against yesterday) for daily/weekly seasonality. - `lookback` union, required — Length of the window used to compute the baseline rate. - … - object — How the metric is compared when threshold-based. - `mode` 'expected', required — Compare against the seasonally-learned expected value for this time of day/week. - `sensitivity` integer — Detector sensitivity from 1 (noisiest) to 6 (strictest). Defaults to 3 when omitted. - `direction` 'above' | 'below' — Direction that opens the incident. Defaults to `above` when omitted. - `sensitivity` integer — Detector sensitivity from 1 (noisiest) to 6 (strictest). Defaults to 3 when omitted. - `window` object, required — Sustained-condition window. - `minutes` integer, required — How long the threshold must stay crossed before the incident opens. Minimum 5. ## Response `201` Monitor created - Monitor - `id` string, required — Stable monitor identifier. - `organizationId` string, required — Organization that owns this monitor. - `projectId` string, required — Project this monitor belongs to. - `slug` string, required — URL-safe slug derived from `name`. Unique within the project. - `name` string, required — Human-readable name. - `description` string, required — Free-form description. Empty string when not set. - `system` boolean, required — `true` for auto-provisioned system monitors, which cannot be deleted or edited; `false` otherwise. - `target` MonitorTarget, required — Entity or filter set watched by this monitor. - `type` 'savedSearch' | 'tool' | 'user' | 'session', required — Product target category: `savedSearch`, `tool`, `user`, or `session`. - `id` string, nullable, required — Target entity id, or `null` for project-wide targets. - `filterSet` MonitorFilterSet — Additional filters applied when evaluating the monitor. - `query` string, nullable — Semantic query applied when evaluating inline trace targets. - `kind` 'savedSearch' | 'tool' | 'user' | 'session' — Normalized target kind returned on persisted monitors. - `stream` 'traces' | 'spans' | 'sessions' — Telemetry stream evaluated by the monitor. - `savedSearchId` string, nullable — Saved-search id for saved-search monitors, or `null` for inline targets. - `metric` union - object — Default metric evaluated for this target. - `kind` 'count', required — Count matching events in each evaluation bucket. - object — Default metric evaluated for this target. - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object — Default metric evaluated for this target. - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object — Default metric evaluated for this target. - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Default metric evaluated for this target. - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - `rule` MonitorRule, required — Single rule evaluated by this monitor. - `trigger` 'match' | 'threshold' | 'escalating', required — When the monitor opens incidents: `match`, `threshold`, or `escalating`. - `config` MonitorConfig, required — Rule configuration used when the monitor is evaluated. - `filterSet` object — Filters applied by the monitor rule. - `query` string, nullable — Semantic query applied by inline monitor targets. - `metric` union - object — Metric evaluated by threshold and escalating monitor rules. - `kind` 'count', required — Count matching events in each evaluation bucket. - object — Metric evaluated by threshold and escalating monitor rules. - `kind` 'errorRate', required — Measure the fraction of matching events that errored. - object — Metric evaluated by threshold and escalating monitor rules. - `kind` 'cacheHitRate', required — Token-weighted prompt-cache hit rate (cache-read tokens over total input-side tokens), a 0..1 fraction. - object — Metric evaluated by threshold and escalating monitor rules. - `kind` 'avg', required — Average a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by threshold and escalating monitor rules. - `kind` 'sum', required — Sum a numeric field over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by threshold and escalating monitor rules. - `kind` 'min', required — Find the minimum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by threshold and escalating monitor rules. - `kind` 'max', required — Find the maximum numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - object — Metric evaluated by threshold and escalating monitor rules. - `kind` 'median', required — Find the median numeric field value over matching events. - `field` 'duration' | 'cost' | 'tokens', required — Numeric field to aggregate. - `condition` union — Condition that controls threshold or escalating incidents. - AlertThresholdCondition - `trigger` 'threshold', required — Opens once the measured value crosses the threshold. - `metric` union, required — Metric measured over the monitor target. - object - … - object - … - object - … - object - … - object - … - object - … - object - … - object - … - `threshold` union, required — How the metric is compared. - object - … - object - … - object - … - `direction` 'above' | 'below' — Direction that opens the incident. Defaults to `above` when omitted. - AlertEscalatingCondition - `trigger` 'escalating', required — Opens when the monitor target is escalating or sustained. - `metric` union, required — Metric measured over the monitor target. - object - … - object - … - object - … - object - … - object - … - object - … - object - … - object - … - `threshold` union - object — How the metric is compared when threshold-based. - … - object — How the metric is compared when threshold-based. - … - object — How the metric is compared when threshold-based. - … - `direction` 'above' | 'below' — Direction that opens the incident. Defaults to `above` when omitted. - `sensitivity` integer — Detector sensitivity from 1 (noisiest) to 6 (strictest). Defaults to 3 when omitted. - `window` object, required — Sustained-condition window. - `minutes` integer, required — How long the threshold must stay crossed before the incident opens. Minimum 5. - `severity` 'low' | 'medium' | 'high', required — Severity of incidents this monitor opens: `low`, `medium`, or `high`. - `mutedAt` string, nullable, required — ISO-8601 timestamp at which the monitor was muted, or `null` when active. - `deletedAt` string, nullable, required — ISO-8601 timestamp at which the monitor was deleted, or `null`. - `createdAt` string, required — ISO-8601 timestamp of creation. - `updatedAt` string, required — ISO-8601 timestamp of the last update. ## Other responses - `400` — Validation error - `401` — Unauthorized - `404` — Not found --- [API](https://skmtc.net/latitude-dev/apis/latitude.md) · [All operations](https://skmtc.net/latitude-dev/apis/latitude/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/latitude-dev/latitude/versions/6a8789c59a5c/schema)