Technique · Feedback and evaluation
Alert deduplication and triage
Groups related production alerts and errors and ranks them so investigation starts with the most impactful.
Sub-techniques
-
Alert correlation
V1065.001Group alerts by fingerprint, service and time window.
-
Impact ranking
V1065.002Rank by users affected, frequency and recency.