Alerting

SRE Burn rate based alerts

quahfamili
Path Finder

Hi all,

I m exploring to increase the efficiency of my systems' alerts. Was reading up on the Google SRE implementation of burn rate based alert. It is supposed to reduce the overall downtime by not scheduling (if by time-based, it will increase the error budget due to the wait time before alerts are fired) alert based on time but with a predetermined rate.

I must declare that after reading the pages a few times, I still cannot grasp the idea of the burn rate. Maybe someone here can enlighten me.

I m interested to see how this burn rate based alert can be implemented in splunk to increase the detection time.

Thanks in advance.

Regards,
Alan

0 Karma

woodcock
Esteemed Legend

How can we possibly help if you don't even post the links to the SRE material?

0 Karma

quahfamili
Path Finder
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...