Severity & cooldown
- Severity —
info,warning,error, orcritical. It labels the alert and drives styling, sound-alert thresholds, and triage. - Cooldown (minutes) — after a rule fires, it won't fire again until the cooldown elapses, even if the condition stays true. This prevents a flapping sensor from spamming you.
Choose a cooldown longer than the typical oscillation around your threshold. For a value that hovers near the limit, a 10–15 minute cooldown is usually right.