Back to notes

July 4, 2026 · 5 min read

How We Fixed Alert Fatigue Without Losing Real Signal

A client's monitoring setup fired two hundred alerts a week and everyone had learned to ignore all of them. Getting back to a system people trusted took deleting most of it.

EngineeringObservability

The client's Slack alerting channel was firing roughly two hundred notifications a week across their tracking and data pipeline monitoring. Nobody read them anymore — the channel had become background noise that everyone had muted individually, which meant a genuinely critical alert had the same visibility as a routine, meaningless one.

When we finally dug into a real outage that had gone unnoticed for three days, the alert had actually fired, correctly, at the right time. It just arrived in a channel that functioned as a graveyard. The monitoring system hadn't failed technically. It had failed socially — it had trained everyone to ignore it.

What was actually generating the noise

  • Alerts on metrics that fluctuated normally within a wide, expected range, triggering on noise rather than anomalies
  • Duplicate alerts from overlapping monitoring tools covering the same underlying failure, each firing independently
  • Alerts with no clear action attached — notifications that told you something happened but not what, if anything, to do about it
  • Severity levels that didn't actually map to anything — everything was marked urgent, so nothing effectively was
An alert nobody acts on isn't a safety net. It's training data teaching your team to ignore the channel entirely.

What we cut and what we kept

We deleted roughly 70% of existing alert rules outright. The remaining 30% got rewritten with a hard rule: every alert needed a specific, named action attached, or it didn't survive the cut. No action, no alert — curiosity-driven monitoring moved to a dashboard people could check voluntarily, not a push notification demanding attention nobody could spare.

Alert volume dropped from two hundred a week to around fifteen. Within a month, the team was actually reading every single one again, because the channel had gone from background noise back to a trustworthy signal. The fix wasn't a better alerting tool. It was ruthlessly deleting alerts until the ones left actually deserved attention.