Alert Strategy Management¶

Guance supports the management of alert strategies for monitoring results by sending alert notifications, allowing you to timely understand abnormal data, discover and solve problems.

Create¶

In Guance Workspace, go to Monitoring > Alert Strategy Management, and click on Create to add a new alert strategy. You can configure alert targets and alert aggregation for the strategy.

Alert Name¶

The name of the current alert strategy.

Notification Configuration¶

Event Severity: Includes Critical, Important, Warning, No Data, Information. Based on the selected event severity, Guance supports associate Alert Aggregation for alert notifications.

For more details on event severity, see Event Severity.

Notification Targets: You can configure notification targets for individual severity levels. Multiple targets can be selected.

The object types are as follows:

Note:

• Recovery Notification: When a previously sent alert event is recovered, Guance will send a recovery notification to the corresponding notification targets. For example, if an Critical notification is sent to a group for a specific event, when the status starts to recover, a recovery notification will be sent to the group.

• Notification Delay: Alert notifications are not sent immediately after generation and may be delayed by up to 1 minute due to data storage issues.

Mute Alerting¶

If the same event is not very urgent but the frequency of alert notifications is high, you can reduce the frequency of alert notifications by setting the time interval for repeated alert notifications.

Note: After setting repeated alert notifications, events will continue to occur, but alert notifications will no longer be sent. The generated data will be stored in Event.

Alert Aggregation¶

No Aggregation: Default configuration; in this mode, alert events will be aggregated every 20 seconds and sent as a single notification to the corresponding notification targets.

Rule-based Aggregation: In this mode, you can choose from the following four aggregation rules and send alert notifications based on the aggregation period:

Aggregation Rule	Description
All	Based on the severity dimension configured in the alert strategy, alert notifications will be generated within the selected aggregation period.
Monitors / Smart Check / SLO	Based on the unique ID of the monitor, smart check detection rule, or SLO, alert notifications will be generated within the selected aggregation period.
Detection Dimension	Based on the detection dimension, such as host, alert notifications will be generated within the selected aggregation period.
Tags	By associate global labels with monitors, alert notifications will be generated within the selected aggregation period based on the tags; multiple tags can be selected. If an event has multiple tag values, the alert notification will be sent based on the tag order configured on the page, and the relationship between multiple tag values is OR.

Intelligent Aggregation: In this mode, events generated within the aggregation period will be clustered and grouped based on the selected "Title" or "Content", and one alert notification will be generated for each group.

• Aggregation Period: In rule-based aggregation mode, you can manually set a time range (1-30 minutes) within which newly generated events will be aggregated and sent as a single alert notification. If the aggregation period is exceeded, newly generated events will be aggregated into a new alert notification.

Strategy List¶

The list contains all the alert strategies in the current workspace. You can view the strategy name, associated monitors, alert aggregation and perform other related operations.

• Search: The alert strategy list supports searching based on the alert strategy name.

• Batch Operations: You can select and delete specific alert strategies in batches.

• Associated Monitors: Show the number of monitors under the alert strategy. Clicking on the number will navigate to the monitor to view the details of the monitors under the alert strategy.

• Alert Aggregation: Display the current alert strategy's aggregation mode.

• Alert Configuration: Click to edit the current alert strategy.

• Delete: When an alert strategy is deleted, monitors under the alert strategy will be automatically categorized under Default.

  • You can also click next to the name to select specific charts for batch deletion.