Alert Enrichment
Alert Enrichment
Alert enrichment is generally available in Grafana Cloud. It adds context to your alert notifications before they reach you. You can start diagnosing an issue, plan a fix, and judge severity without first opening Grafana or another tool.
Each enrichment runs when an alert fires and attaches its results to the notification. That context travels with the alert all the way through to notification delivery.
Enrich notifications for any contact point
Enrichment applies to every alert notification, whatever contact point delivers it. Whether you page an on-call responder, post to a chat channel, or call a webhook, the same enriched context reaches the recipient.
Query any data source for context
The Data Source Query enricher runs a query against any Grafana data source and adds the result to the notification. It detects the response type and formats it for you:
- Metrics: adds label values from the result as annotations.
- Logs: adds a preview of recent log lines and a link to open the query in Explore.
- Table: adds a compact table preview for any other data source.
Choose the right enricher for the job
Beyond data source queries, you can assign annotations, call an external endpoint, or generate an LLM explanation of the alert. You can also start a Grafana Assistant investigation, which adds a link to the notification payload, so responders move straight from the notification to triage.
Scope enrichments to the alerts that need them
Admins manage enrichments globally from Alerting > Settings > Alert Enrichment, and scope them to all alerts, or to alerts that match labels or annotations. With the alert.enrichments:write permission, you can also add an enrichment to a single rule from its Alert enrichment tab.
For background on what alert enrichment does, refer to the original announcement.
