Skip to main content
Six channels, three severity levels, deduplication, and escalation routing. Configurable per interface.

​
Alert channels

Payloads sent to an off-device channel are scrubbed of message content before they leave the machine. Local log channels keep the full detail. Message content never leaves your network.
Slack and Teams are their own channels: each formats the alert for that service. Use the generic Webhook channel for anything else that accepts an incoming webhook.

​
Routing and deduplication

  • Deduplication: suppresses repeat alerts for the same issue within a configurable window.
  • Escalation: routes alerts by severity to different channels or on-call groups.
  • Payload contents: each alert carries the file path, severity, error and warning counts, message type, sending application, and the failing rules with their locations.

​
Severity levels

​
Alert lifecycle

Alerts follow a lifecycle: triggered → acknowledged → resolved.

​
Example alert

Acknowledging an alert records that a human reviewed it but does not resolve the underlying issue. Use AI Triage for recommended fixes.