Routing decision
Each alert can start RCA, continue an existing group, join a reduced-alert side panel, or be recorded only.
Alert Noise Reduction decides what should happen to source alerts before they become RCA work. It is a tenant-wide policy that deduplicates exact repeats, groups related alerts, limits RCA turns, and records reduced alerts without losing source-event history.

What this page covers
Use exact dedupe windows for monitor retries and repeated webhook delivery.
Use group windows and max RCA turns to keep node floods or multi-source alerts attached to one active investigation.
Use SKG-assisted deterministic correlation for service, topology, ownership, and dependency relationships without calling an Agent LLM.
Operational detail
Alert Noise Reduction decides what should happen to source alerts before they become RCA work. It is a tenant-wide policy that deduplicates exact repeats, groups related alerts, limits RCA turns, and records reduced alerts without losing source-event history.
Each alert can start RCA, continue an existing group, join a reduced-alert side panel, or be recorded only.
Tenant admins tune exact dedupe, group windows, max RCA turns, warning/info behavior, SKG correlation, and timeline summaries.
Full payloads stay in source history while reduced counts, related-alert details, and timeline cards explain why extra turns were avoided.
Related pages