microsoft / microsoft/sre-agent
[Issue] Alerts consolidation Issue for Incident (Aure Monitor Integration)
- Dominant language
- PowerShell
- Stars
- 160
- Forks
- 97
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 12
Description
Issue Description
Alerts from same alert rule within a given cooldown time window are consolidating even for different resource.
Thread ID
Paste the thread ID from the SRE Agent portal. (e.g., 50f7521d-dfee-487e-9188-5abdc8adde91)
Steps to Reproduce
1. Create a Alert rule in azure
2. Incident response plan with some cool off window
3 Generate alert from different resource for same alert rule
4. SRE creates and consolidate alert in same incident
Expected Behavior
Two separate incidents for separate resource alert for same alert rule with in cooldown time window
Actual Behavior
Consolidating alert in same incident
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the Azure alert rule, incident response plan, and SRE Agent portal thread identified in the issue. Reproduce alerts from different resources under the same rule and cooldown window, then trace how they are assigned to incidents. Done means alerts from separate resources create separate incidents during the cooldown period.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- observability
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100