Skip to content

[Observability/Kibana][Alerting] Document per-alert snooze - #7522

Merged
nastasha-solomon merged 15 commits into
mainfrom
issue-7334
Jul 30, 2026
Merged

[Observability/Kibana][Alerting] Document per-alert snooze#7522
nastasha-solomon merged 15 commits into
mainfrom
issue-7334

Conversation

@nastasha-solomon

@nastasha-solomon nastasha-solomon commented Jul 22, 2026

Copy link
Copy Markdown
Member

Summary

Documents per-alert snooze: snooze a single alert instance for a duration, until a condition is met, or indefinitely, without silencing the whole rule. Snooze replaces Mute going forward; alerts muted on earlier versions keep working and show as snoozed indefinitely. To avoid duplicating this explanation across pages, the Observability Alerts page now links to the canonical Snooze/Mute reference in the Kibana alerting docs instead of repeating it.

Fixes #7334.

Previews

  • View alerts | Snooze alerts: Canonical per-alert snooze reference. Covers when/how to snooze or unsnooze alerts, and explains the quick and condition-based snooze options.
  • View and manage alerts (Observability): Docs for the snooze and mute features link to canonical docs on the Kibana alerting "View and manage alerts" page.
  • Alert panels: Panel action list now shows Snooze (9.5+) and scopes Mute to 9.0–9.4.
  • Compare alerting systems: Noise reduction row now notes per-alert snooze for Kibana alerting.

Note: The "Snooze options" tip in view-alerts.md links to the custom/metric threshold rule pages without the specific #custom-threshold-warning-threshold anchor, since that section lives in #7643 (still open). Once #7643 merges, that anchor can be added back.

Generative AI disclosure

  1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?
  • Yes - Cursor + Claude
  • No

@github-actions

Copy link
Copy Markdown
Contributor

Elastic Docs AI PR menu

Check the box to run an AI review for this pull request.

  • Review docs changes (docs-review). Status: not started.

Powered by GitHub Agentic Workflows and docs-actions. For more information, reach out to the docs team.

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

Elastic Docs Style Checker (Vale)

Summary: 9 suggestions found

💡 Suggestions (9): Optional style improvements. Apply when helpful.
File Line Rule Message
explore-analyze/alerting/alerts/alerting-getting-started.md 128 Elastic.WordChoice Consider using 'turn off, silence' instead of 'mute', unless the term is in the UI.
explore-analyze/alerting/alerts/view-alerts.md 137 Elastic.WordChoice Consider using 'deactivate, deselect, hide, turn off' instead of 'disable', unless the term is in the UI.
explore-analyze/alerting/alerts/view-alerts.md 147 Elastic.WordChoice Consider using 'turn off, silence' instead of 'mute', unless the term is in the UI.
explore-analyze/alerting/alerts/view-alerts.md 147 Elastic.WordChoice Consider using 'turn off, silence' instead of 'mute', unless the term is in the UI.
solutions/observability/incident-management/view-alerts.md 147 Elastic.WordChoice Consider using 'deactivate, deselect, hide, turn off' instead of 'disable', unless the term is in the UI.
solutions/observability/incident-management/view-alerts.md 155 Elastic.WordChoice Consider using 'turn off, silence' instead of 'Mute', unless the term is in the UI.
solutions/observability/incident-management/view-alerts.md 162 Elastic.WordChoice Consider using 'turn off, silence' instead of 'mute', unless the term is in the UI.
solutions/observability/incident-management/view-alerts.md 162 Elastic.WordChoice Consider using 'turn off, silence' instead of 'mute', unless the term is in the UI.
solutions/observability/incident-management/view-alerts.md 162 Elastic.WordChoice Consider using 'turn off, silence' instead of 'Mute', unless the term is in the UI.

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

Per-alert snooze (#7334), the Stack/Observability Alerts feature
privileges (#7228), and the threshold rules warning severity tier
(#7234) are separate features. Splits the privilege and warning
severity content out of this PR so it only covers per-alert snooze.
@nastasha-solomon nastasha-solomon self-assigned this Jul 29, 2026
The custom-threshold-warning-threshold anchor now lives in the
warning-severity PR (#7643), which broke the
docs build for this PR. Link to the page instead until that PR
merges.
nastasha-solomon added a commit that referenced this pull request Jul 29, 2026
The snooze-alerts anchor lives in the per-alert snooze PR
(#7522), not yet merged. Link to the page
instead until that PR merges.
nastasha-solomon added a commit that referenced this pull request Jul 29, 2026
These sentences referenced the snooze-alert-options anchor, which
lives in the per-alert snooze PR (#7522) and
doesn't exist yet, so the docs build had auto-commented them out.
Link to the page instead until that PR merges.
@nastasha-solomon nastasha-solomon changed the title [Observability/Kibana][Alerting] Document per-alert snooze, alert-only privileges, and threshold rules warning severity [Observability/Kibana][Alerting] Document per-alert snooze Jul 29, 2026
@nastasha-solomon
nastasha-solomon marked this pull request as ready for review July 29, 2026 22:49
@nastasha-solomon
nastasha-solomon requested a review from a team as a code owner July 29, 2026 22:49

@js-jankisalvi js-jankisalvi left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Content looks good, maybe some screenshots could be helpful.


To snooze an active alert, open its action menu ({icon}`boxes_vertical`) from the Alerts table or the alert details page, then select **Snooze**. Choose **Quick Snooze** when you know how long it should stay quiet, or **Condition based** when you'd rather the alert itself, not the clock, decide when actions resume. Configure your snooze, then select **Snooze alert** to apply it.

### Quick Snooze [quick-snooze]

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: Should we add a screenshot for quick snnoze?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Screenshots are pretty expensive in terms of maintenance so the Elastic style guide recommends only including them when UIs are so complex that they can't be clearly described using text.


Pick **Indefinitely** when you have no fixed window in mind, such as an alert you've triaged and will follow up on yourself. It stays snoozed until you unsnooze it manually, and is also what existing muted alerts show as.

### Condition based snooze [condition-based-snooze]

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: Should we a screenshot for condition based snooze?

@mdbirnstiehl mdbirnstiehl left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! I had a few suggestions/comments, do with them what you will!

Comment thread explore-analyze/alerting/alerts/view-alerts.md Outdated
Comment thread explore-analyze/alerting/alerts/view-alerts.md Outdated
Comment thread explore-analyze/alerting/alerts/view-alerts.md Outdated
Comment thread solutions/observability/incident-management/view-alerts.md Outdated
Comment thread explore-analyze/alerting/alerts/view-alerts.md Outdated
Comment thread explore-analyze/alerting/alerts/view-alerts.md
Comment thread solutions/observability/incident-management/view-alerts.md
@nastasha-solomon
nastasha-solomon merged commit aa9a5a3 into main Jul 30, 2026
8 checks passed
@nastasha-solomon
nastasha-solomon deleted the issue-7334 branch July 30, 2026 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Observability/Kibana][Alerting][9.5 & Serverless] Add details about the per alert snooze feature

3 participants