Skip to main content
Version: 1.2

Overview

Policies let you transform alerts that match your criteria: change fields (severity, tags, attributes, …), optionally run a custom tool, on an event trigger or a fixed schedule. They run in priority order (lower number first), similar to notification rules, but they modify alerts instead of sending messages.

StepWhat you configureDocumentation
1General — name, priority, status, trigger, active time windowCreating a policy
2Conditions — which alerts the policy applies toConditions
3Modifiers — field changes and optional tool executionModifiers and tools

Policies list

Where to find it in the UI​

In the sidebar under Management:

  • Policies → /policies

Header actions: Refresh and Create policy. The list supports name search and Toggle TQL filter mode — see TQL search and filters.

Permissions

Creating, editing, running, enabling/disabling, and deleting policies require the appropriate permissions in your organization. If Create policy or row actions are missing, contact your administrator.

How policies fit in ToBeAlert​

Typical example — downgrade noisy staging alerts:

  1. Trigger: On alert creation and any change type.
  2. Conditions: environment Equals → Staging AND severity Equals → critical.
  3. Modifiers: severity / set → major.
  4. Time window: All Day, status active, priority 10.

When a matching alert is created or updated, its severity is adjusted before operators see it in the dashboard.

Policies vs notification rules​

PoliciesNotification rules
PurposeTransform alert dataSend email/Telegram notifications
Route/policies/notifications/rules
Condition builderSame visual builderSame visual builder
Third tabModifiers (+ optional tool)Actions (method, recipients)
Trigger locationGeneral tabConditions tab
Manual testRun → execution results dialogForce (disabled in current UI)
Built-in entriesNone — all user-createdSome built-in rules (not deletable)

Do not confuse Management → Policies with Service Topology → Weight Policies — those are separate weight-ranking rules without modifiers or custom tools.

License limits​

ResourceWhen limited
PoliciesHeader shows used/max; Create policy is disabled with Max items reached
Custom tools (policies with Execute custom tool)Active policies with a tool assigned also count toward the tools limit; tool selector disabled at limit
ModuleRelationship
Notification rulesSame condition builder; complementary (notify vs transform)
Maintenance windowsScheduled maintenance — pair policy tuning with window scope
Tools overviewScripts runnable from the Modifiers tab
Alerts dashboardSee results of policy transformations on alerts

Best practices​

  1. Lower priority for more specific policies; higher numbers for broad catch-all rules.
  2. Test with Run after creating or changing conditions/modifiers.
  3. Keep conditions narrow — avoid unintended mass updates to production alerts.
  4. Pair with notifications — policy adjusts data; notification rule informs people.
  5. Review scheduled policies — ensure time window and cron-like triggers match maintenance expectations.
  6. Document each policy in Description — future you (and auditors) will need the intent.