ALL email alerts goes in one Incident

all my synthetic alerts goes in one Incident and not able to get any email alerts

@vaibhav.khandalkar -

That’s normal and expected behaviour.

By default, alert policies default to an incident preference of By Policy - meaning that for any violations within that policy, there will only be a single incident, as the incident is rolled into a per policy set up.

You can configure this to be By Condition Which will create a new incident every time a condition within your policy is violated. For each of those incidents you’ll get a new series of notifications.

There is a final option of By Condition and Entity - which will create a new incident for every violation of every condition - and of every entity targeted by conditions. This is the most verbose in terms of alert notifications.

See more on that in our docs here:

Or in this great level up post:

1 Like