|
2 | 2 | mapped_pages: |
3 | 3 | - https://www.elastic.co/guide/en/observability/current/view-observability-alerts.html |
4 | 4 | - https://www.elastic.co/guide/en/serverless/current/observability-view-alerts.html |
| 5 | +applies_to: |
| 6 | + stack: all |
| 7 | + serverless: |
| 8 | + observability: all |
5 | 9 | products: |
6 | 10 | - id: observability |
7 | 11 | - id: cloud-serverless |
@@ -65,22 +69,27 @@ To view the alert in the app that triggered it: |
65 | 69 | There are four common alert statuses: |
66 | 70 |
|
67 | 71 | `active` |
68 | | -: The conditions for the rule are met. Rule actions are run according to the notification settings. |
| 72 | +: The conditions for the rule are met. Rule actions will run according to the notification settings. |
69 | 73 |
|
70 | 74 | `flapping` |
71 | | -: The alert is switching repeatedly between active and recovered states. |
72 | 75 |
|
73 | | -::::{important} |
74 | | -The flapping state is possible only if you have enabled alert flapping detection. Go to the **Alerts** page and click **Manage Rules** to navigate to the **{{rules-app}}** page. Click **Settings** then set the look back window and threshold that are used to determine whether alerts are flapping. For example, you can specify that the alert must change status at least 6 times in the last 10 runs. If the rule has actions that run when the alert status changes, those actions are suppressed while the alert is flapping. |
| 76 | +: The alert is switching repeatedly between active and recovered states. If the rule has actions that run when the alert status changes states, those actions are suppressed while the alert is flapping. |
| 77 | + |
| 78 | +::::{note} |
| 79 | + |
| 80 | +Alert flapping is turned on by default. To modify the conditions for changing an alert's status to the flapping state, configure the alert flapping settings. |
| 81 | + |
| 82 | +First, navigate to the **Alerts** page in the main menu, or use the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md). Next, click **Manage Rules**, then **Settings** to open the global rule settings for the space. In the **Alert flapping detection** section, modify the rules' look back window and threshold for alert status changes. For example, you can specify that the alert must change status at least 6 times in the last 10 runs before it's status changes to flapping. |
75 | 83 |
|
76 | 84 | :::: |
77 | 85 |
|
78 | 86 | `recovered` |
79 | | -: The conditions for the rule are no longer met. Rule recovery actions run if the rule's conditions _were not_ met during the current rule execution, but were in the previous one. |
| 87 | +: The conditions for the rule are no longer met. Rule recovery actions will run if the rule's conditions _were not_ met during the current rule execution, but were in the previous one. |
80 | 88 |
|
81 | | -::::{note} |
| 89 | +::::{note} |
| 90 | + |
| 91 | +For flapping alerts, the recovered state will only be applied if the rule's conditions are not met for the number of consecutive runs that are defined by the flapping alerts' **Alert status change threshold**. After a flapping alert is recovered, the flapping state criteria is reinstated, but only for newly generated alerts. |
82 | 92 |
|
83 | | -Alerts in the flapping state will only change to recovered if the rule's conditions are not met for the number of consecutive runs that are defined by the **Alert status change threshold** for flapping alerts. After an alert is recovered, the flapping state criteria is only applied to newly generated alerts. |
84 | 93 | :::: |
85 | 94 |
|
86 | 95 |
|
@@ -111,7 +120,6 @@ Each case can have a maximum of 1,000 alerts. |
111 | 120 | :::: |
112 | 121 |
|
113 | 122 |
|
114 | | - |
115 | 123 | ### Add an alert to a new case [observability-view-alerts-add-an-alert-to-a-new-case] |
116 | 124 |
|
117 | 125 | To add an alert to a new case: |
|
0 commit comments