---
rank: 1
kind: ranking
id: rk_708b709f36934657
title: Open alerts
subject: alert
question: Which open alert should be handled first?
status: draft
as_of: 2026-10-24T18:00:00Z
fresh_for: 5m
method: weighted_sum
normalize: minmax
ties: competition
missing: worst
decide: min_lead=0 on_close=first on_stale=recheck top_k=5
snapshot: rs_3cbe8cf8a26a42c3
---

# Open alerts

Which open alert should be handled first?

## Criteria

| id | label | weight | better | unit | normalize | half_life | max_age | must | how |
|---|---|---|---|---|---|---|---|---|---|
| severity | Severity | 0.3 | higher | level | minmax | 30m | 6h | | Severity on your own scale, such as 1 to 5. |
| blast_radius | Blast radius | 0.2 | higher | ratio | none | 15m | 6h | | Share of your systems affected, from your monitors. |
| confidence | Confidence | 0.1 | higher | ratio | none | 15m | 6h | | Share of your checks that confirm the alert is real. |
| minutes_since | Minutes since raised | 0.1 | lower | minutes | log | 15m | 6h | | Minutes since the alert was raised. |
| customer_impact | Customer impact | 0.2 | higher | ratio | none | 15m | 6h | | Share of customer requests failing, from your own monitors. |
| duplicates | Duplicates | 0.1 | lower | count | minmax | 15m | 6h | | Other open alerts that are the same issue. |

## Items

| rank | id | label | score | low | high | move | uri | group | severity | blast_radius | confidence | minutes_since | customer_impact | duplicates |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | it_c149faaba45dc46f | Checkout error spike | 0.579 | | | | | | 5 | 0.3 | 0.95 | 4 | 0.12 | 2 |
| 2 | it_a850f5a5ec2ad673 | Login latency p95 up | 0.490682 | | | | | | 3 | 0.6 | 0.9 | 12 | 0.02 | 0 |
| 3 | it_68f4a0c2fe465424 | Queue backlog growing | 0.45053 | | | | | | 4 | 0.2 | 0.7 | 7 | 0.01 | 1 |
| 4 | it_1c05e1e070144f06 | Disk 85% full on a database node | 0.368651 | | | | | | 3 | 0.1 | 1 | 40 | 0 | 0 |
| 5 | it_402c5f46567b1c5b | Certificate expires in 6 days | 0.3 | | | | | | 2 | 0.5 | 1 | 300 | 0 | 0 |

## Sources

| id | kind | trust | label | uri |
|---|---|---|---|---|
| monitors | own | 1 | Your monitors | |
| status_checks | own | 1 | Your synthetic checks | |

## Notes

Example data. Replace every value with your own.

When to use: Order open alerts by severity, reach and customer impact, freshness in minutes.