Specify when New Relic creates incidents

When an alert policy's condition violates a Critical (red) threshold, New Relic Alerts can create an incident record with detailed information to help you respond efficiently. An incident is a collection of one or more violations. It includes all of the open and close timestamps for each violation, as well as chart snapshots of the data being evaluated around the time of each violation. The incident record will include any Warning (yellow) violations associated with the Critical (red) threshold violation.

Admins, Owner or Add-on Managers: To select when New Relic Alerts creates incidents and how violations are grouped, use the Incident preference setting inside your policy. Then, to view the alert policy violations (incident records), select the Incidents indexes.

Incident rollup options

Each option for incident rollup has its own advantages. You can select any option for any alert policy.

Incident preference Comments
By policy (default)

Only one incident will be open at a time for the entire policy.

  • Fewest number of alert notifications
  • Requires immediate action and closing the incidents to be effective
By condition

One incident will be open at a time for each condition in your policy.

  • More alert notifications
  • Useful for policies containing conditions that focus on targets (resources) that perform the same job; for example, hosts that all serve the same application(s)
By condition and entity

An incident will be created for every violation in your policy.

  • Most alert notifications
  • Useful if you need to be notified of every violation or if you have an external system where you want to send alert notifications

Select your incident preference

By default, New Relic Alerts creates a single incident record for each alert policy.

Alerts v3: Alert incidents rollup
alerts.newrelic.com > Alert policies > (select a policy): The selected alert policy's page shows how New Relic Alerts rolls up incidents for alert notifications and UI details. (Default is By policy). To choose a different option for this policy, select Incident preference.

Admins or Owner

To change the incident preference for the selected alert policy:

  1. Go to alerts.newrelic.com > Alert policies > (select a policy).
  2. Select Incident preference, then select your choice of available options.
  3. Select Save.

Repeat these steps for each alert policy as needed.

Example: Roll up by policy (default)

Alert policy incident preferences
When you select the default (By policy) as your incident preference, New Relic Alerts will group all condition violations into the same incident.

By default, New Relic Alerts creates a single incident for the selected policy. If additional conditions are violated by any target after the incident opens, the violations are added to the same incident. Only one incident appears on your Incidents indexes for the selected policy.

Selecting the By policy preference is the most general option. New Relic Alerts will accumulate all condition violations for every target into a single incident record.

Example: Roll up by condition

Alert policy incident preferences
When you select By condition as your incident preference, New Relic Alerts will group all violations by any target for a specific condition into separate incidents.

Selecting the By condition option is useful, for example, when you want an individual incident record to focus on a specific condition. If the policy has multiple conditions, separate incident records for each condition will appear on your Incidents indexes.

  • If a target violates a condition for the alert policy, New Relic Alerts will create an incident record.
  • If the same target violates another condition for the alert policy, New Relic Alerts will create another incident record.
  • If additional targets violate the same condition after the incident options, New Relic Alerts will add these violations to the incident record already open for that condition.

Example: Roll up by condition and entity

Alert policy incident preferences
When you select By condition and entity as your incident preference, New Relic Alerts will not group violations at all. A new incident will be created for every violation that occurs in your policy.

Selecting the By condition and entity option is the most granular level for creating incident records. This is useful, for example, when you closely want to monitor anything that is occurring anywhere across your infrastructure. An incident will appear on your Incidents indexes for every violation that occurs within your policy.

For more help

Additional documentation resources include:

Recommendations for learning more: