microsoft / microsoft/sre-agent

[Issue] Alerts consolidation Issue for Incident (Aure Monitor Integration)

Open
#274 1 comment 0 reactions 0 assignees View on GitHub
question
Dominant language
PowerShell
Stars
160
Forks
97
Avg merge
2d 5h
Merged PRs (30d)
12

Description

Issue Description
Alerts from same alert rule within a given cooldown time window are consolidating even for different resource.

Thread ID
Paste the thread ID from the SRE Agent portal. (e.g., 50f7521d-dfee-487e-9188-5abdc8adde91)

Steps to Reproduce
1. Create a Alert rule in azure
2. Incident response plan with some cool off window
3 Generate alert from different resource for same alert rule
4. SRE creates and consolidate alert in same incident

Expected Behavior
Two separate incidents for separate resource alert for same alert rule with in cooldown time window

Actual Behavior
Consolidating alert in same incident

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the Azure alert rule, incident response plan, and SRE Agent portal thread identified in the issue. Reproduce alerts from different resources under the same rule and cooldown window, then trace how they are assigned to incidents. Done means alerts from separate resources create separate incidents during the cooldown period.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
observability
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.