Why the Default Configuration Is Unusable
The volume a stock deployment produces, where it comes from, and why it is a design choice rather than an accident.
Noise
A platform at default settings produces more alerts than anybody will read, and an unread queue looks like monitoring.
7 notes
The volume a stock deployment produces, where it comes from, and why it is a design choice rather than an accident.
The measurement that precedes any tuning, and the four numbers that tell you where the noise is.
Most alert conditions are set to a number somebody guessed. What to set them to instead, and the question that settles each.
The documented consequence of high alert volume, how it presents in this specific business, and what it costs commercially.
A single global configuration is wrong for every client. How to vary it without ending up with fifty bespoke setups.
The checks worth switching off entirely, and the test that decides any case not on the list.
Reduction in volume is not the goal on its own. Four measures that show whether the monitoring got better or just quieter.