Setting monitor muting rules

To display a list of defined muting rules, in the navigation menu select Alerts > Muting Rules.

You can take the following actions:

• Filter the list of rules by choosing a rule status, which can be Active, Scheduled, or Expired.

• Point to any muting rule to display additional actions:

  • Copy muting rule: Available for rules that are Active, Scheduled, or Expired.
  • Expire Muting Rule: Available for rules that are Active or Scheduled.

• Select any muting rule in the list to view an overview, which includes the monitor or time series that the muting rule matches, when the muting rule starts and ends, who created the muting rule, and the total monitors and time series affected.

When viewing an active muting rule, you can display a list of alerts that the rule mutes during the specified time period. For example, you can show all muted alerts for the past hour to help determine whether the muting rule is effectively muting the intended alerts.

The Muted Alerts section displays the following muting rule statuses. You can change the time period to see which alerts the muting rule affects:

• All alerts are a complete list of alerts muted during the selected time period.
• Active alerts are actively triggering, but are currently muted by the muting rule.
• Resolved alerts were previously triggered and muted by the muting rule, but are no longer triggering.

You can add a muting rule from the navigation menu from the list of defined monitors or directly from the list of muting rules.

Adding a muting rule from an existing monitor pre-populates the matching criteria without having to manually enter that information. As you define a muting rule, the Preview Alerts section displays how your muting rule impacts related alerts. Based on this preview, you can view and modify monitoring rule's results before the muting rule is active.

To create a muting rule:

1. Choose whether to mute an existing rule or create a new one:

   • To mute an existing rule:
     1. In the navigation menu select Alerts > Monitors & Signals and click the monitor you want to mute.
     2. If you want to mute specific time series only (and not the entire monitor), choose the time series from the list in the Series Legend.
     3. On the same line as the monitor's title, click Mute.
   • To create a new muting rule, in the navigation menu select Alerts > Muting Rules, and click Create muting rule.

2. Define your muting rule:

   • Name: Required, but doesn't need to be unique.

   • What alerts should be muted?: Whether the muting rule should mute A Monitor or a Time Series, the Matcher which is the operator to match a value against a key, and the Key and Value to match on.

   • When should it start?: Start muting Now or at a specific Start time.

   • For how long?: The Duration or defined End time of the muting rule.

     Muting rules support regular expressions, which you can use to match key values against. Refer to the section about how to match on values using regular expressions.

3. Click Save.

After you create a muting rule in the Chronosphere app, select it from the list of muting rules and click Show JSON to view the complete JSON request for your muting rule. You can copy this JSON snippet and use it in a script with the Chronosphere API.

{
  "slug": "lifecycle-match-envoy_cluster_name",
  "name": "Muting Rule",
  "matchers": [
    {
      "type": "REGEXP_MATCHER_TYPE",
      "name": "envoy_cluster_name",
      "value": "cluster_span_rc.*"
    }
  ],
...
}

When viewing an expired muting rule, a counter displays the number of muted alerts and affected monitors while the rule was active.

To stop a muting rule:

1. On the Muting Rules page, take one of the following actions:
   • Hold the pointer over the muting rule you want to mute and click Expire Muting Rule.
   • Click a muting rule to open the Muting Rules Details page, and then click Expire Muting Rule.
2. In the confirmation dialog, click Confirm (Expire).

When defining your muting rule in the Chronosphere app, specify the following criteria:

• Select the match regex (=~) matcher.
• Enter envoy_cluster_name as the key.
• Enter cluster_span_rc.* as the value to match on.