Time-Based Alert Grouping

Time-Based Alert Grouping automatically adds alerts to an open incident for a predetermined period. This feature is helpful for services that generate many alerts. Grouped alerts mean fewer incidents and interruptions for responders, richer context for triggered incidents, and lower resolution times.

Enable Time-Based Alert Grouping

1. In the web app, navigate to Services Service Directory and click your preferred service's name.
2. Select the Settings tab and click New Grouping or Edit in the Reduce Noise section.
3. Select Time only and select a duration from the dropdown.

4. Click Save.

Disable Time-Based Alert Grouping

1. In the web app, navigate to Services Service Directory and click the name of your desired service.
2. Select the Settings tab and click Edit in the Reduce Noise section.
3. In the bottom-left, click Delete. In the confirmation modal, click Delete again.
   • Note: This action cannot be undone.

Time-Based Alert Grouping Behavior

When you enable Time-Based Alert Grouping on a service, the first alert creates a new incident. Subsequent alerts add to that incident for the specified time period while the incident remains open (that is, triggered or acknowledged). If the incident resolves within the selected time period, the timer stops, and subsequent alerts do not group into that incident.

The timer restarts when the next alert on that service arrives and triggers a new incident. If the incident does not resolve within the selected time period, the incident remains open and the next alert triggers a new incident. Subsequent alerts group into the most recent incident.

If you select until incident is resolved for the duration of the timer, the first alert on the service triggers an incident and all subsequent alerts group into that incident until it resolves, regardless of how much time passes.

Time-Based Alert Grouping Example

This example uses a Shopping Cart service with a one-hour time-based alert grouping window.

FAQ