▲
24
Everyone ignores our alerts. How do we fix that without turning them all off?
A few hundred a day. People filter them to a folder and the folder never gets opened. I do not really blame them.
A few hundred a day. People filter them to a folder and the folder never gets opened. I do not really blame them.
turn them all off. add them back one at a time when something bites you. you end up with about six and they are all good
Variation I like: keep the rules, change the delivery. Anything you would not wake up for goes into a daily digest instead of an email each. Same coverage, one message instead of two hundred.
If you have a compliance obligation to review logs daily, the digest is also the artefact for that. Two hundred ignored emails is not evidence of review. An opened digest with a sign-off is.
A few hundred a day is not an alerting system, it is a report nobody asked for.
The fix is unpleasant and simple. Turn nearly all of them off. Under ten a day, each being something a person would genuinely act on at 3am. Everything else becomes a weekly review, which is a different thing with a different urgency.
The test per alert: what would I do when this fires? If the answer is look at it and usually nothing, it is not an alert.