Category: Triage & Routing · View source ↗
Triage & Routing
Alert Storm Merge
Collapse a burst of identical alert tickets fired within a few hours into the earliest ticket as parent, so a flapping monitor does not flood the queue.
Connectors: none — works with Thread out of the box
Role: Dispatcher
Outcome: Fewer Escalations & Less Noise, Time & Cost Savings (Capacity)
When to use: The queue shows many near-identical alert tickets from one source in a short span, a flow checks whether a new alert belongs to an in-progress storm, or “clean up this alert flood” after a monitor misbehaved overnight.
Run it: on one alert ticket · across a flood of alert tickets · or as a Flow (when a new alert ticket is created).
Was this page helpful?
⌘I