Update Watchdog monitor page with additional filters (DataDog#21625)

* Update Watchdog monitor page with additional filters * add images

Author: Nils

content/en/monitors/types/watchdog.md

@@ -31,16 +31,24 @@ In this section, choose between an APM, Infrastructure, or Logs alert:
 
 An APM alert is created when Watchdog detects anomalous behavior on your system's services or their child resources.
 
-{{< img src="/monitors/monitor_types/watchdog/watchdog-monitor-apm2.png" alt="Configuring a Watchdog Monitor on APM" style="width:80%;">}}
+{{< img src="/monitors/monitor_types/watchdog/watchdog-monitor-apm3.png" alt="Configuring a Watchdog Monitor on APM" style="width:80%;">}}
 
 ### Select sources {#select-sources-1}
 
 Select the scope to be alerted on by configuring:
 
+**1. Predefined selectors**
 * The type of Watchdog anomaly: Error Rates, Latency, Hits, or any APM alert
 * The value for APM primary tags (see the [Set primary tags to scope][1] page for instructions to configure APM primary and second primary tags)
 * The [APM service][2] (choose `Any services` to monitor all services)
 * The [APM resource][3] of a service (choose `*` to monitor all resources of a service)
+
+**2. Additional filters**
+* Filter on any additional tag available on the Watchdog event (like `team` for example)
+* Boolean and wildcards are supported
+* Dimensions available on the predefined selectors should not be used in the additional filters
+
+**3. Group By**
 * The dimensions you want to [group notifications by][4]
 
 After your selections are made, the graph at the top of the monitor creation page displays the matching Watchdog events over the selected time frame.
@@ -52,14 +60,22 @@ After your selections are made, the graph at the top of the monitor creation pag
 {{% /tab %}}
 {{% tab "Infrastructure" %}}
 
-{{< img src="/monitors/monitor_types/watchdog/watchdog-monitor-infra.png" alt="Configuring a Watchdog Monitor on Infrastructure" style="width:80%;">}}
+{{< img src="/monitors/monitor_types/watchdog/watchdog-monitor-infra-2.png" alt="Configuring a Watchdog Monitor on Infrastructure" style="width:80%;">}}
 
 ### Select sources {#select-sources-2}
 
 Select the scope to be alerted on by configuring:
 
+**1. Predefined selectors**
 * The Infrastructure integration to cover (select `Any Infrastructure alert` to cover them all). See the [Watchdog overview][1] for a full list of integrations covered by Watchdog infrastructure)
 * The Tags available for the selected integration
+
+**2. Additional filters**
+* Filter on any additional tag available on the Watchdog event (like `team` for example)
+* Boolean and wildcards are supported
+* Dimensions available on the predefined selectors should not be used in the additional filters
+
+**3. Group By**
 * The dimensions you want to [group notifications by][2]
 
 After your selections are made, the graph at the top of the monitor creation page displays the matching Watchdog events over the selected time frame.
@@ -71,17 +87,25 @@ After your selections are made, the graph at the top of the monitor creation pag
 
 A logs alert indicates that either a new pattern of error logs has been detected or that there has been an increase in an existing pattern of error logs.
 
-{{< img src="/monitors/monitor_types/watchdog/log_anomaly_monitor-2.png" alt="The Watchdog monitor's edit page showing the alert category set to logs, alert type as log anomaly, env set to production, service set to ad-server, and the monitor's title is Anomaly Detected in Production Ad Server" style="width:55%;">}}
+{{< img src="/monitors/monitor_types/watchdog/log_anomaly_monitor-3.png" alt="The Watchdog monitor's edit page showing the alert category set to logs, alert type as log anomaly, env set to production, service set to ad-server, and the monitor's title is Anomaly Detected in Production Ad Server" style="width:55%;">}}
 
 ### Select sources {#select-sources-3}
 
 Select the scope to be alerted on by configuring:
 
+**1. Predefined selectors**
 * The environment (leave empty to alert on all environments). These values are derived from the `env` tag in your logs
 * The service (leave empty to alert on all services). These values are derived from the `service` [reserved attribute][2] in your logs
 * The log source (leave empty to alert on all sources). These values are derived from the `source` [reserved attribute][2] in your logs
 * The log status (leave empty to alert on all status). These values are derived from the `status` [reserved attribute][2] in your logs
 * The log anomaly type (`new Error` or `Spike in existing logs`) determines whether the anomaly describes a new pattern of error logs or an increase in an existing pattern of error logs
+
+**2. Additional filters**
+* Filter on any additional tag available on the Watchdog event (like `team` for example)
+* Boolean and wildcards are supported
+* Dimensions available on the predefined selectors should not be used in the additional filters
+
+**3. Group By**
 * The dimensions you want to [group notifications by][1]
 
 After your selections are made, the graph at the top of the monitor creation page displays the matching Watchdog events over the selected time frame.