Skip to content

Noise score: Classify alerts as actionable vs. noise with confidence #11

@nomadicmehul

Description

@nomadicmehul

Summary

Add a noise scoring system where the agent classifies each incoming alert as actionable (needs investigation) vs. noise (can be suppressed or auto-resolved), with a confidence score.

Why This Matters

Not every alert needs investigation. Flapping alerts, known transient issues, and informational alerts waste agent time. A noise classifier reduces unnecessary investigation cycles.

Acceptance Criteria

  • Score each alert 0.0 (pure noise) to 1.0 (definitely actionable)
  • Factors: alert frequency, auto-resolve history, severity, affected service criticality, user-impact correlation
  • Configurable threshold (default: 0.5) — below threshold = auto-suppress
  • Log suppressed alerts for audit trail
  • Metrics: "X alerts received, Y investigated, Z suppressed as noise"
  • Feed suppression decisions back into incident memory for learning

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:agentAgent architecture and orchestrationarea:deduplicationAlert dedup and noise reductionphase:2-smart-triagePhase 2 — Smart Triage & Investigationpriority:highImportant, do if time allowstype:featureNew feature or capability

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions