DevOps Operations Performance Platform

PagerDuty Blog

Subscribe to PagerDuty Blog: eMailAlertsEmail Alerts
Get PagerDuty Blog via: homepageHomepage mobileMobile rssRSS facebookFacebook twitterTwitter linkedinLinkedIn

Blog Feed Post

3 Easy Steps to Suppressing Alert Noise

For many of our customers, reducing alert noise is a difficult, yet rewarding task. Cleaning up your alerting means fewer late night pages and happier team members. But this task can feel a lot like yak shaving if you don’t have the proper tools.

In this post, I’m going to run through an effective workflow that will allow you to identify these noisy, non-actionable alerts, and do something about them. You’ll be able to easily control what notifies your team, without having to mess around with upstream tool configurations.

1. Get a holistic view and identify noisy alerts

First, you need a holistic, live view of your alerting infrastructure. To truly understand service dependencies, alerting behavior, as well as the impact of any outage, you need a visualization in which you can easily grok thousands of data points.

Our Infrastructure Health Application, which lives within our Operations Command Console, does just this. Think of it as the ultimate timeline, where you can spot those noisy, redundant alerts that are continually paging your team.

operations command consolehttps://www.pagerduty.com/wp-content/uploads/2017/04/occ-300x162.png 300w, https://www.pagerduty.com/wp-content/uploads/2017/04/occ-768x416.png 768w, https://www.pagerduty.com/wp-content/uploads/2017/04/occ-250x135.png 250w, https://www.pagerduty.com/wp-content/uploads/2017/04/occ-180x97.png 180w, https://www.pagerduty.com/wp-content/uploads/2017/04/occ.png 1600w" sizes="(max-width: 1024px) 100vw, 1024px" />


2. Learn more about these alerts

Where do they come from? What is their severity?

After identifying a noisy source, you can glean more information about it by diving into our new Alerts Table. Here you can search, sort, and filter through alerts across your entire infrastructure. These alerts have also all been automatically normalized via the Events API v2, making it really easy to find all the right information without needing to memorize schemas across different vendors. In my example, I can see that alerts coming from source prodsql-a all have Severity = Info. These are informational alerts and really shouldn’t be paging my team.

alert tableshttps://www.pagerduty.com/wp-content/uploads/2017/04/alerts-table-300x16... 300w, https://www.pagerduty.com/wp-content/uploads/2017/04/alerts-table-768x41... 768w, https://www.pagerduty.com/wp-content/uploads/2017/04/alerts-table-250x13... 250w, https://www.pagerduty.com/wp-content/uploads/2017/04/alerts-table-180x97... 180w, https://www.pagerduty.com/wp-content/uploads/2017/04/alerts-table.png 1597w" sizes="(max-width: 1024px) 100vw, 1024px" />


3. Take action and suppress

Because I’ve spotted informational alerts that shouldn’t be paging my team, I’m going to use PagerDuty’s Event Rules Engine to suppress these informational alerts. Event rules within PagerDuty span multiple integrations, which is great because I don’t need to change any configurations in my upstream monitoring tools, saving me time.

create events ruleshttps://www.pagerduty.com/wp-content/uploads/2017/04/event-rules-300x93.png 300w, https://www.pagerduty.com/wp-content/uploads/2017/04/event-rules-768x238... 768w, https://www.pagerduty.com/wp-content/uploads/2017/04/event-rules-250x77.png 250w, https://www.pagerduty.com/wp-content/uploads/2017/04/event-rules-180x56.png 180w, https://www.pagerduty.com/wp-content/uploads/2017/04/event-rules.png 1600w" sizes="(max-width: 1024px) 100vw, 1024px" />

Voilà, I have successfully identified a non-actionable alert and created an event rule to suppress it. Now, these types of alerts will no longer page me, but all of that data still exists and is visualized within PagerDuty, so I can get a truly holistic view of my infrastructure at all times.

Finding the right alert balance is just as much an art as a science. However, the more information you have and less obscure your alerting infrastructure is, the better the chances you have of focusing on what matters, missing less of the important stuff, and ultimately being successful. At PagerDuty, we equip you with the solutions needed to understand, learn, and intelligently take action on infrastructure events. We’re proud to empower amazing development and operations teams to manage their services in production with ease.

For more information on these solutions, check out our latest release of capabilities designed for developers.

The post 3 Easy Steps to Suppressing Alert Noise appeared first on PagerDuty.

Read the original blog entry...

More Stories By PagerDuty Blog

PagerDuty’s operations performance platform helps companies increase reliability. By connecting people, systems and data in a single view, PagerDuty delivers visibility and actionable intelligence across global operations for effective incident resolution management. PagerDuty has over 100 platform partners, and is trusted by Fortune 500 companies and startups alike, including Microsoft, National Instruments, Electronic Arts, Adobe, Rackspace, Etsy, Square and Github.