General question on how people might be baselining for alerts. At this time our alerting is over complicated and cumbersome, our basic alert setup is 150+ lines. I have looked at cutting this down a lot by using some prediction models which seems pretty good but wondering if there are any good articles or documents others have come across on this.
