Grafana Cloud Enterprise Open source

Note

private-preview-feature is currently in private preview. Grafana Labs offers support on a best-effort basis, and breaking changes might occur prior to the feature being made generally available.

Alert enrichment

Grafana Cloud alert enrichment feature makes your alert notifications richer and more actionable with a variety of enrichment options. With Alert enrichment, you can configure different enrichment types to add add to preliminary analysis or additional context. Alert enrichments can be scoped by either labels, annotations, or applied across all alerts.

Alert enrichments are created and stored in the Alert Enrichment section of the Alerting settings page. To view your alert enrichments, go to Alerting > Settings > Alert Enrichment.

Grafana Cloud Alerting enrichments

Before you begin

Only an alerting administrators can create alert enrichments.

Create a new enrichment

  1. To create a new alert enrichment, go to Alerting > Settings > Alert Enrichment. Click + New alert enrichment to create a new enrichment.

  2. Give your enrichment a name an optional description.

  3. Enter a timeout for the enrichment. This is the maximum amount of time the enrichment runs for before it sends the alert notification.

  4. Select an enricher type.

    • Assign: add an annotation assignment to alert notifications.
    • External: Trigger an external service endpoint.
    • Data Source Query: Define queries that will be executed to enrich your alerts. The results will be available in the enrichment context.
    • Asserts: Initiate a RCA in Asserts Workbench.
    • Sift: Create a Sift investigation on the alerts.
    • Explain: Generate LLM explanations for the alerts. You need to configure the annotation key where the explanation will be stored. Requires LLM plugin to be enabled.
    • Assistant Investigations: Starts a Grafana Investigation and adds a link to the Investigation in the Alert Notification.

      Warning

      The Assistant Investigations shouldn’t be used with the All alerts scope.

  5. Define the Scope of the enrichment. You can choose to have the enrichment scoped to All alerts, Label scoped, or Annotation scoped.

  6. Click Save Enrichment to save and apply the new enrichment.

A completed example of the New enrichment wizard

Edit enrichments

You can edit your alert enrichments from the Alert rule list page. Find the alert rule and click Edit. At the bottom of the alert rule edit page, you can find a button to view the alert enrichments or edit the alert enrichments.

If you add an alert enrichment here, it is applied on a individual level to the designated alert rule.