All Products
Search
Document Center

Simple Log Service:Alert denoising

Last Updated:Jan 02, 2025

This topic outlines the various methods of alert denoising.

Method

Description

Deduplicate alerts based on fingerprints

When the alert management system of Simple Log Service processes alerts that have the same fingerprint, the system classifies the alerts as the same alert. The system retains only one of the alerts and deletes the remaining duplicate alerts.

Merge alerts

When you create an alert rule, you can configure alert policies to either merge alerts or not merge them.

Alert merging

The alert management system sends notifications for alerts that match the conditions specified in a route and merge policy.

Dynamic action policy mechanism

Simple Log Service allows you to dynamically attach different action policies to the same alert policy by using the dynamic action policy mechanism. This mechanism specifies an action policy based on alert monitoring rules instead of alert policies.

Silence policies

If you configure a silence policy, the alert management system does not send alert notifications during the specified period for alerts that meet the specified conditions. For example, you can silence alert notifications if the alerts are triggered during the maintenance of the test environment and the alerts have the env=test label.

Match modes of a conditional node

When you configure alert policies, action policies, and notification method quotas, you can add a conditional node. If alerts in an alert set meet the specified conditions, alerts are processed based on the specified action.