# Alerts

### Alerts

This section explains on how to create alert endpoints so that alerts can be ingested from source to target system. It also allows to define Correlation and Suppression policies on alerts.

Click on Alerts tab on Project Configuration page.

#### Alert Endpoint (Target)

1. Select ‘Alert Endpoint’ tab. Click on ‘+’ to create new endpoints. 
2. Select ‘Target’ and enter Name, Description
3. Select Event Type (ex: Splunk Alerts, Solarwinds Alerts, vROps Alerts, etc).
4. Select Endpoint Type (ex: REST, MACAW Notification, CSV Data, Webhook, Email, etc)
5. Click Save.

A sample screen as displayed below.

![](https://lh3.googleusercontent.com/CQBZCK9zcDoPg5BWIg7IRBKjKzrpzc64v261BU_15gn9yyj11rFIUAEc79uHJ2jdOdchBlJIF2usPznsBrFH4ONL33kc7KoAe4VvO4qbcxXeRHiSWTUF-Gas3MNi1GrYbo154QOu)

#### Alert Endpoint (Source)

1. Click on ‘+’ to add the source alert endpoint.
2. Enter Name, Description, select Event Type and Endpoint Type. Click on Save.
3. From the Alert Endpoints home page, on the context menu of the endpoint, click Enable.

#### Alert Mappings

1. Click on ‘Alert Mapping’ tab.
2. click ‘+’ to select both source and target alert endpoints and chose if this mapping needs to be enabled or not
3. The following figure shows some of the alert mappings done in a demo environment. 

![](https://lh4.googleusercontent.com/ZyODobuPUzXUbXstHCehnx3Jx4RlXbDllajtJibtp7TJ4cf0GC8RuS6JIHbX2QzoXcCwix-rGPkfcMxZVKvbphBTTBnNl3Y4kh-rmMGmzEYkzF54T5E6ofrHAZ2eyvbwnNvQVGDZ)

#### Correlation Policies

A Correlation policy allows to group similar alerts, for example, grouped by environment, alert type, source system, IP address, etc.

There are two types of Correlation policies - Correlate Burst and Correlate Group.<br>

**How to create a correlation policy?**

Navigation: Project Configuration -> Alerts -> Correlation Policies\
Click on ‘+’ to create new correlation policy

1. select either  ‘Correlate Burst’ or ‘Correlate Group’.
2. Enter correlation group severity, Groupby and other details.&#x20;

A sample input screen for correlation policy is as given below.

![](https://lh3.googleusercontent.com/wNOtuX4iy3hjmPsic1PNUYv1SLXwVmAJhqpz3T03aoA5xplHBasj1qkIriuuyijARel8Abo5cXFqY7lGVZWITWOQcPEDNZ0r2tUarajUniNC8OZR-_XnMJWM5SmBxsioDMb6Tht4)

![](https://lh5.googleusercontent.com/wGknhsqo1PMt0PPnvqhrqNOfPVkv_B8y-lu4GO_R8WkRpyyws_h6h5owGZFKh17WcKX4BxJbALZXtWxQDIvaKZxt9XwVqpdYgVgwZZl-V0fvLDuOxF1mujbD1aX20ktqN4RSMRIz)

**How to create a Suppression policy?**

Navigation: Project Configuration-> Alerts-> Suppression Policies<br>

Suppression policies help to suppress unnecessary alert noise raised for example during a maintenance window, etc. There are two types of policies - Suppress, Suppress Flapping Alerts.\
\
Click on ‘+’ to create a suppression policy.

1. Enter Name, Description, when the suppress needs to be automatically cleared, does it require repeated run, etc.
2. A Sample suppression policy is as shown below.

![](https://lh4.googleusercontent.com/VbBHneHyf5igZBSddDikYVjL8-m7EvIfjWSu84Md4uTo5HkirWFRF4RtZVdpFhUjqivGfccXW7bHcgL5uT5N8HAW_xqT416NUI3gBJy-9uJB14KRWs1iQHDWS6kVLJ2efb03VEnS)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://oiadocs.cloudfabrix.io/admin-features-guide/projects/configure-project/alerts.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.