Hi all! What is the general advice on alert detection periods and suppression periods? I'm running elementary OSS. I'm concerned about sending out the same alert repeatedly. Thank you!

Hey Thomas, nice to see you again 😄 I didn't do much with anomaly detection yet so I cannot speak for the detection periods. I guess it's a bit of a trial in error to nail the sensitivity. for surpression: I guess it depends a bit on • how often does the test fail? • how quick can you resolve the issue? I usually have a default on 24 hours on project-level and for tests which tend to be spammy 72 hours to make sure I can still take every test serious and don't condition myself to ignore them

Hi Tim, Small world indeed! Good to see you again and thank you for the response. I’ve noticed there's a lot of trial and error involved in this process. We've been experimenting with detection and sensitivity periods, which has been effective, but it really does vary from one alert to another. We followed your suggestion of a 24-hour default period for suppression. There is a fine balance between having too many alerts, which can lead to them being ignored, and ensuring that necessary actions are taken as a result 🤔.