Alert Structure

Fields description in the alert you can use in your workflows

Structure

Field Name	Description	Example
labels	Map of key:values derived from monitor definition.	{ "workload": "frontend", "namespace": "prod" }
status	Current status of the alert	firing - Active alert indicating an ongoing issue. resolved - The issue has been resolved, and the alert is no longer active. suppressed - Alert is suppressed. pending - No Data or insufficient data to determine the alert state.
lastReceived	Timestamp when the alert was last received	This alert timestamp
firingStartTime	Start time of the firing alert	First timestamp of the current firing state.
source	Sources generating the alert	grafana
fingerprint	Unique fingerprint of the alert, this is a hash of the labels	02f5568d4c4b5b7f
alertname	Name of the monitor	Workload Pods Crashed Monitor
trigger	Trigger condition of the workflow	alert / manual / interval

Usage

When crafting your workflows you can use any of the fields above using templating in any workflow field. Encapsulate you fields using double opening and closing curly brackets.

Examples

Using Label Values

You can access label values by alert.labels.*

message: "Pod Crashed - Pod: {{ alert.labels.pod_name }} Namespace: {{ alert.labels.namespace }}"