Aggregation

If things go wrong, many events may be sent to marbot that result in similar alerts. To avoid a flood of alerts, marbot groups similar events into the one alert (deduplication). marbot will keep you updated about the number of events that are aggregated into one alert.

By default, alerts are grouped for seven days and notifications for one minute. If you close an alert, the aggregation starts again as well.

Sample Alert

Alert aggregation in Slack:

Configuration

You can configure the window size for both alerts and notifications. Send a message in a channel mentioning @marbot:

@marbot Configure this endpoint!