Cole_McDonald
Professor
3 months agoAlert Escalation Throttle Auditing?
Is there somewhere logging alert throttling for the escalation chains... it's currently a tedious process to unravel what would have caused (random example: ~1623 throttle alert tickets in our ticketing system).
The throttle ticket doesn't contain any researchable information.
The Audit Log doesn't show those events.
Looking at the closed alerts didn't show the volume that would account for that quantity of throttle tickets.
Does it consider throttling in a sliding time window and alert a new throttle for every new alert at the far end of the window? If so, that would negate the purpose of the throttling once it scales past the quantity set for the throttling threshold.