There is no easy way to answer this without knowing how you operate and what is critical to the success of your organization. Having said that, there are some generic KPIs that would be relevant to most:
- Number and ratio of Alerts to Incidents (ratio of alerts that required an incident)
- Number and ratio of qualified Incidents without an Alert - measures how effective your monitoring is
- % of Alerts closed without being acknowledged - this can be used to cut noise
