Awesome Reviewers

Verification · Feedback and evaluation

Alert deduplication and triage

Groups related production alerts and errors and ranks them so investigation starts with the most impactful.

Sub-techniques

  • Alert correlation V1065.001

    Group alerts by fingerprint, service and time window.

  • Impact ranking V1065.002

    Rank by users affected, frequency and recency.

How to build it

  1. Fingerprint errors by normalised stack trace.
  2. Correlate within a time window per service.
  3. Rank before routing to people or agents.

Signals in a repository

  • Alert routing and grouping rules in monitoring config.