Alerts & Escalation
YAML-driven alerting engine with threshold conditions, lifecycle tracking, escalation chains, windowed M-of-N evaluation, and composite alarm logic.
Alert Lifecycle
graph LR
T["Triggered"] --> A["Acknowledged"]
A --> R["Resolved"]
T -.->|auto-resolve| R
Condition Types
| Condition | Description |
|---|---|
| FieldAbove | Triggers when field exceeds threshold |
| FieldBelow | Triggers when field drops below threshold |
| Expression | Arbitrary expression evaluation (Expr AST) |
Escalation Actions
| Action | Delay | Description |
|---|---|---|
| LogConsole | 0s | Write message to Console pane |
| Webhook | configurable | POST to external URL with JSON payload |
| configurable | Send notification email |
Advanced Features
- M-of-N evaluation:
evaluation_periods+datapoints_to_alarm— alert fires when M of the last N periods breach - Composite alarms: Combine rules with AND / OR / NOT logic
- Entity filters: Scope alerts to entity subsets via glob, group, or field predicates
- Suppression windows: Maintenance windows suppress alerts by time range
- Dedup keys: Template strings like
tai_temp_{'entity_id}prevent duplicate alerts - Anomaly bands: Fleet-level Z-score anomaly detection with configurable standard deviation thresholds
Questions?
Reach out for help with integration, deployment, or custom domain codecs.