Automated Alert Management

摘要

Alerts may be received from an event monitoring system that monitors computing resources of a computer system. Based on an alert ruleset, an alert management module may determine whether to provide notification of the alert. If the alert management module decides to provide notification of the alert, then the alert management module may initiate the creation of an issue ticket corresponding to the alert in an issue tracking system. If the alert management module decides not to provide notification of the alert, then the alert management module may discard the alert.

主权项

1. A computer-implemented method of managing alerts generated by an event monitoring system comprising executing, on one or more processors, the steps of:
receiving, at a computing device from an event monitoring system, an alert associated with a computing resource monitored by the event monitoring system; applying, to the alert received, at least one rule of an alert ruleset stored in memory of the computing device; and either discarding the alert or providing a notification of the alert based on the at least one rule applied; wherein the alert ruleset comprises a rule configured such that the alert is discarded when the alert is a duplicate alert and such that the notification is provided when the alert is not a duplicate alert; and wherein the rule defines the alert to be a duplicate alert when a previous alert associated with the computing resource has been received within the predetermined time period prior to receipt of the alert and defines the alert not a duplicate alert when no previous alert associated with the computing resource has been received within the predetermined time period prior to the alert.