Mixed alert grouping

Mixed alert grouping combines multiple strategies—currently CMDB-based and tag-based grouping—to form a single, cohesive alert group. It reduces noise, bridges gaps when one method isn't enough, and delivers a clearer, end-to-end view of incidents. This approach helps operators identify root causes faster and take informed action, even in complex or incomplete data environments.

To understand how Mixed grouping works in practice, it’s important to look at the individual strategies it currently supports. At this stage, Mixed Grouping comprises two core methods: CMDB based alert grouping, which leverages service relationships defined in the CMDB, and Tag cluster alert grouping, which uses shared metadata across alerts. Each plays a distinct role in correlating related alerts effectively.

If you're looking to group alerts, see Create Group automation.