Overview

ilert’s Alerting system is the foundation for incident detection and response. It connects your monitoring, logging, observability, and ticketing tools with your on-call and incident management workflows, ensuring that the right people are notified at the right time.

Alerts in ilert represent actionable signals that require human or automated attention. They form the starting point of ilert’s event-driven workflow: Event → Alert → Incident

How alerting works

1. Event received An event is sent to ilert from a monitoring or observability system (e.g. Grafana, Prometheus, Datadog, AWS CloudWatch). Each event includes a payload that describes the condition or state change.

2. Event processed ilert normalizes and processes incoming events using rules defined in the alert source. It may group, deduplicate, or suppress events automatically to reduce noise.

3. Alert created or updated Depending on the configuration, ilert creates a new alert or updates an existing one (for example, when an event includes an alertKey). This alert is now visible in the Alerts page.

4. Notifications triggered Based on escalation policies, on-call schedules, and notification rules, ilert notifies the appropriate users or teams through channels like push, SMS, email, voice, or ChatOps integrations.

Core Concepts

Term	Description
Event	The raw signal received from a monitoring tool or external source. Events are visible in logs of an alert source.
Alert	A structured representation of one or more related events that require action.
Alert source	The configuration endpoint where events are received and processed in ilert.
Alert action (optional)	Alert actions extend ilert’s alerting and incident response capabilities to your other tools. They define what happens when an alert is created, updated, or resolved, allowing you to automate or trigger external workflows.
Notification	The method used to alert responders (push, SMS, voice, WhatsApp, etc.).
Event flow (optional)	Event flows provide an optional layer above alert sources, acting as a central hub for event ingestion. They facilitate the configuration of complex routing rules within the event flow.

In this section

Category	You’ll Learn How To
Understand the Lifecycle	Explore how events become alerts and how ilert processes them, including grouping, rate limits, and suppression.
Configure Alerting	Connect monitoring tools, set up alert sources, define support hours, and customize notification behavior.
Work with Alerts	View, acknowledge, and resolve alerts in the ilert Dashboard and Alert View.