Summary

Review the available metrics for vector to determine if we can publish and write alerting rules that are useful to administrators.

Acceptance Criteria

• Summarize the proposed alerts in this issue with any relevant details
• Update the details and AC LOG-1920 based upon the findings of this task
• Gain approval from the logging oversight committee

Notes

• Fluentd alerts can be used as a reference but there may not be a 1:1 mapping between the two collectors. (e.g. no buffering for vector)