Incident rules and alert policies

[Edoardo Passacantilli]

Hi all,

in our service we'are using Incident rules to reduce alert noise. Our configuration includes some Alert Policies when a new alert is received; these policies can change the name (message) and the priority of alerts. In this case, the Incident Rules works on the originating values or on the new values modified by the alert polcies?

Thanks in advance

EP

[John M · Accepted solution]

Hi Edoardo,

That is a good question - Incident Rules run against the new/updated alert values value, after being modified by the alert policies. 

[Edoardo Passacantilli]

Hi John, thanks a lot for the support!