Observability Labs

Two rules, one outage, one alert: How change point detection cuts alert noise

The discovery agent re-runs each firing rule’s own ES|QL query against the logs unchanged, so the alert names the unreachable service with the query that proves it.