{"total":100,"alerts":[{"id":236,"alert_id":"cebf5007-bc54-42fa-96fc-9cb01be8fe07","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:17:20.686306+00:00","resolved_at":null,"created_at":"2026-05-18T19:17:20Z"},{"id":235,"alert_id":"d4f6fba1-2e8e-442d-8337-d0cd4d806fc4","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:17:20.686251+00:00","resolved_at":null,"created_at":"2026-05-18T19:17:20Z"},{"id":234,"alert_id":"35fa63a0-556d-4484-bd3a-1235049af308","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:17:20.686180+00:00","resolved_at":null,"created_at":"2026-05-18T19:17:20Z"},{"id":233,"alert_id":"12c41a22-4035-4939-b902-51a340054448","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":400,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:17:20.684758+00:00","resolved_at":null,"created_at":"2026-05-18T19:17:20Z"},{"id":232,"alert_id":"47901301-8c14-4efe-8d4c-7a8cf8da9bd3","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":400,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:17:20.682021+00:00","resolved_at":null,"created_at":"2026-05-18T19:17:20Z"},{"id":231,"alert_id":"244c5ae2-ddfd-4ba2-b2ee-579eefa813b5","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":400,"error_events":400,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:17:20.678951+00:00","resolved_at":null,"created_at":"2026-05-18T19:17:20Z"},{"id":230,"alert_id":"8950170f-3719-464f-8bc6-ce5bc2c23f20","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":400,"error_events":400,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:17:20.678229+00:00","resolved_at":null,"created_at":"2026-05-18T19:17:20Z"},{"id":229,"alert_id":"ed1a7d4d-bf6d-45fb-aa1b-ff50c8d54098","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:16:50.665898+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:50Z"},{"id":228,"alert_id":"3bc4b871-f622-4fce-9fbb-65cbc6eb23b4","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:16:50.665846+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:50Z"},{"id":227,"alert_id":"ed0ae919-32e4-4ed5-9365-5c5d17e9e1e5","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:16:50.665778+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:50Z"},{"id":226,"alert_id":"15dbd564-a3a2-4b70-9141-7ec4e25b5238","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":400,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:16:50.664636+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:50Z"},{"id":225,"alert_id":"4e14bc78-c0d2-4806-b64c-b6927ac7fbef","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":400,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:16:50.662531+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:50Z"},{"id":224,"alert_id":"bdfc9403-f949-422d-9ca9-03a1f1194c80","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":400,"error_events":400,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:16:50.660470+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:50Z"},{"id":223,"alert_id":"e92266f8-77fe-4209-bfc8-e62369e22cae","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":400,"error_events":400,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:16:50.659504+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:50Z"},{"id":222,"alert_id":"e12e8f25-c1f2-45d8-afdc-f19f91610f8a","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:16:20.658493+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:20Z"},{"id":221,"alert_id":"3a684588-864b-43d5-8f5d-229861af19ba","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:16:20.658441+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:20Z"},{"id":220,"alert_id":"3a3732af-4784-4547-81ae-5d06a9b4b7d4","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:16:20.658366+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:20Z"},{"id":219,"alert_id":"a83877a8-35c1-402f-9835-8dcc5ac8877c","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:16:20.657097+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:20Z"},{"id":218,"alert_id":"7cb5290e-042f-406c-adf7-aeca3f93b70d","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:16:20.654613+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:20Z"},{"id":217,"alert_id":"eca6788f-65ec-470f-93fb-5f6aa0d8a7aa","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:16:20.651766+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:20Z"},{"id":216,"alert_id":"719c5744-e621-4ff2-b1ec-ac590278c7dd","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:16:20.649430+00:00","resolved_at":null,"created_at":"2026-05-18T19:16:20Z"},{"id":215,"alert_id":"fcedae0a-fcc9-4145-b7c8-284948a97a41","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:15:50.648424+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:50Z"},{"id":214,"alert_id":"ef31c681-f51d-401b-b6fc-292b87f4fc3e","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:15:50.648373+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:50Z"},{"id":213,"alert_id":"72a286aa-2555-482e-b1b3-452b8b2e32b2","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:15:50.648303+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:50Z"},{"id":212,"alert_id":"e9e787f2-1bff-44a5-a8b5-32f061de7405","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:15:50.647247+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:50Z"},{"id":211,"alert_id":"1c60ac43-cfaa-4327-ada5-38b2482bfaa4","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:15:50.644948+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:50Z"},{"id":210,"alert_id":"e1379ae0-de87-4e7f-aa55-f593bde2ea42","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:15:50.642165+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:50Z"},{"id":209,"alert_id":"b6fdb663-e359-4c20-a103-c8794ac321c1","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:15:50.639716+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:50Z"},{"id":208,"alert_id":"d46cd5cf-ab30-4275-a50b-c897725f969a","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:15:20.630368+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:20Z"},{"id":207,"alert_id":"decb5a05-7aab-4a3f-8fc4-008e4ee68c34","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:15:20.630314+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:20Z"},{"id":206,"alert_id":"5c415d57-a349-4226-b201-20e80d272479","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:15:20.630248+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:20Z"},{"id":205,"alert_id":"c43e6215-55ff-4d20-8786-176e9d548885","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:15:20.629216+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:20Z"},{"id":204,"alert_id":"84729e3e-bc65-40b7-aad3-08a548676d4e","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:15:20.626880+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:20Z"},{"id":203,"alert_id":"562c1d15-7ab0-40e5-ba0c-7bf6bf13508d","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:15:20.624731+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:20Z"},{"id":202,"alert_id":"27d39de1-5933-4a77-966b-eb1e7537c05d","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:15:20.624090+00:00","resolved_at":null,"created_at":"2026-05-18T19:15:20Z"},{"id":201,"alert_id":"59effadc-94eb-4e51-91c2-4874d184d444","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:14:50.620267+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:50Z"},{"id":200,"alert_id":"19212e5e-9d49-42de-8428-9577d93e2874","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:14:50.620213+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:50Z"},{"id":199,"alert_id":"154fcf6e-191d-44e0-841d-0eee42204504","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:14:50.620133+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:50Z"},{"id":198,"alert_id":"7471484a-308d-4fc1-bf26-8e19249c5ac8","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:14:50.617849+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:50Z"},{"id":197,"alert_id":"3cea2f95-d8a5-4468-9c29-db0cbab0150d","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:14:50.613621+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:50Z"},{"id":196,"alert_id":"40f9b9dd-d524-40be-b331-b79323a3d5dc","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:14:50.610420+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:50Z"},{"id":195,"alert_id":"ded91edf-a518-4e5c-99ab-a125e71e5d0c","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:14:50.609782+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:50Z"},{"id":194,"alert_id":"ac0b471e-4f37-46e9-ae76-f571e0ed93c4","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:14:20.609132+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:20Z"},{"id":193,"alert_id":"3692fee3-033f-473e-8dca-06540e16d3cf","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:14:20.609078+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:20Z"},{"id":192,"alert_id":"6c329afb-ffe6-420c-b078-bef2193eac7b","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:14:20.609006+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:20Z"},{"id":191,"alert_id":"fb99a45f-7009-47bc-a20a-ac8af23e67cb","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:14:20.606619+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:20Z"},{"id":190,"alert_id":"52abc1be-e8b8-46e4-afeb-056bffbc57dd","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:14:20.598248+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:20Z"},{"id":189,"alert_id":"c3bfd889-58e6-46f9-835f-41f1f590d4cd","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:14:20.595861+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:20Z"},{"id":188,"alert_id":"16bfb462-59eb-4035-a8c9-61a07d5f5f9a","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:14:20.594937+00:00","resolved_at":null,"created_at":"2026-05-18T19:14:20Z"},{"id":187,"alert_id":"db7519a3-fbe2-4a0c-a5fd-ab1234ffd5a2","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:13:50.593815+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:50Z"},{"id":186,"alert_id":"555f2409-594e-4f37-b06f-cf767af66af0","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:13:50.593761+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:50Z"},{"id":185,"alert_id":"fe39856c-d980-4551-a68c-9a88a85f69aa","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:13:50.593687+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:50Z"},{"id":184,"alert_id":"c2af9d4e-ef62-4eb9-acc9-64eecd468d6d","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:13:50.592395+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:50Z"},{"id":183,"alert_id":"110e80aa-a947-439f-8c74-d6c29d40bd02","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:13:50.589720+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:50Z"},{"id":182,"alert_id":"41e3c7b6-5034-4b76-a2cb-f5ee22f7cee7","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:13:50.586402+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:50Z"},{"id":181,"alert_id":"c6484183-1bb8-4e35-b2ae-13736e7e3561","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:13:50.585755+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:50Z"},{"id":180,"alert_id":"086712ed-5f58-4d68-ace9-f2d66da21f65","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:13:20.584624+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:20Z"},{"id":179,"alert_id":"33759b93-aa05-46af-9389-3859332f6091","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:13:20.584564+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:20Z"},{"id":178,"alert_id":"573d7c96-3ee7-4cf0-97bc-84f33415f53a","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:13:20.584479+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:20Z"},{"id":177,"alert_id":"6f205292-f3e6-4bf1-a40a-21c60f72e93e","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:13:20.583423+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:20Z"},{"id":176,"alert_id":"01ada948-6b6a-411c-8f5a-e74e33416cd6","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:13:20.581322+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:20Z"},{"id":175,"alert_id":"723b078e-6deb-4fc6-a12f-e3838c70cb65","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:13:20.579011+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:20Z"},{"id":174,"alert_id":"5e66c71a-0ebe-4c20-8fc4-2bde2bc42d1d","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:13:20.578403+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:20Z"},{"id":173,"alert_id":"1514d56c-dfde-4195-93dc-fd0f2f3e03ad","rule_id":"critical_error_event_rate","rule_name":"Critical Error Event Rate","severity":"critical","status":"active","message":"Rule 'Critical Error Event Rate' triggered: events_per_minute > 30.0 (current=400.0)","details":{"metric":"events_per_minute","threshold":30.0,"operator":">","count":400,"window_seconds":60,"current_value":400.0},"source":"engine","fired_at":"2026-05-18T19:13:20.576728+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:20Z"},{"id":172,"alert_id":"06481de0-6c80-4d92-9cea-6bf0ea0c67ba","rule_id":"high_error_event_rate","rule_name":"High Error Event Rate","severity":"high","status":"active","message":"Rule 'High Error Event Rate' triggered: events_per_minute > 10.0 (current=400.0)","details":{"metric":"events_per_minute","threshold":10.0,"operator":">","count":400,"window_seconds":60,"current_value":400.0},"source":"engine","fired_at":"2026-05-18T19:13:20.570211+00:00","resolved_at":null,"created_at":"2026-05-18T19:13:20Z"},{"id":171,"alert_id":"ac018932-c59f-4c32-8e71-452c8ca6b168","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:12:50.568791+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:50Z"},{"id":170,"alert_id":"26d929a5-d416-4156-bd96-461d622fe626","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:12:50.568595+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:50Z"},{"id":169,"alert_id":"ad0003d5-db3b-42e7-84af-979db4efc519","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["ab98e4e1-7047-4368-a9a1-dc37bd7421da","a6b678b8-f3ef-4850-aafa-69636b243c9b","cd73385b-2d97-41b5-b017-dee8d329640e","72662211-7b9f-4867-901b-2a5411aed4b4","96faab58-34ae-4028-bea1-324998d7c67b"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:12:50.568488+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:50Z"},{"id":168,"alert_id":"8951fa3d-2007-4768-9181-3ae5eab14846","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:12:50.567282+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:50Z"},{"id":167,"alert_id":"70654e94-ce6e-462a-b7d8-38a399ce8025","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":550,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:12:50.561214+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:50Z"},{"id":166,"alert_id":"3c7cc45b-d6e9-4440-92d1-8009fa1ecc07","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:12:50.555779+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:50Z"},{"id":165,"alert_id":"ea6cc534-aa06-43c7-8670-eee9c6de5801","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":550,"error_events":550,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:12:50.552134+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:50Z"},{"id":164,"alert_id":"1dfacde0-9213-4fc5-8d0d-e2b5c3889fbe","rule_id":"critical_error_event_rate","rule_name":"Critical Error Event Rate","severity":"critical","status":"active","message":"Rule 'Critical Error Event Rate' triggered: events_per_minute > 30.0 (current=400.0)","details":{"metric":"events_per_minute","threshold":30.0,"operator":">","count":400,"window_seconds":60,"current_value":400.0},"source":"engine","fired_at":"2026-05-18T19:12:50.541039+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:50Z"},{"id":163,"alert_id":"fe447956-4e9c-4151-8396-58497873dd18","rule_id":"high_error_event_rate","rule_name":"High Error Event Rate","severity":"high","status":"active","message":"Rule 'High Error Event Rate' triggered: events_per_minute > 10.0 (current=400.0)","details":{"metric":"events_per_minute","threshold":10.0,"operator":">","count":400,"window_seconds":60,"current_value":400.0},"source":"engine","fired_at":"2026-05-18T19:12:50.540369+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:50Z"},{"id":162,"alert_id":"75abf394-3fda-4b08-807b-04561fecbd48","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["9d6b4e54-655e-4212-9e47-586d07f5b7b6","a6a7fff3-6dcd-4479-9da6-3c79233dfc7f","60131ef1-b6a8-48c3-9050-89e48000c47a","46578e69-da6b-405d-917b-6085e4068972","5ee676e5-61c8-485c-a120-939be198be91"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:12:20.538044+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:20Z"},{"id":161,"alert_id":"ceb6b8df-e953-4137-a8ed-27bd96ddf404","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["9d6b4e54-655e-4212-9e47-586d07f5b7b6","a6a7fff3-6dcd-4479-9da6-3c79233dfc7f","60131ef1-b6a8-48c3-9050-89e48000c47a","46578e69-da6b-405d-917b-6085e4068972","5ee676e5-61c8-485c-a120-939be198be91"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:12:20.537990+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:20Z"},{"id":160,"alert_id":"1e57fe76-421d-4a2e-9d92-c6f0ddecdf38","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["9d6b4e54-655e-4212-9e47-586d07f5b7b6","a6a7fff3-6dcd-4479-9da6-3c79233dfc7f","60131ef1-b6a8-48c3-9050-89e48000c47a","46578e69-da6b-405d-917b-6085e4068972","5ee676e5-61c8-485c-a120-939be198be91"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:12:20.537920+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:20Z"},{"id":159,"alert_id":"83aecb0a-029b-4a56-ab19-21b37546195c","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":150,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:12:20.536032+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:20Z"},{"id":158,"alert_id":"f73f3e32-9c8c-439f-b967-90c027b14cfb","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":150,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:12:20.535092+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:20Z"},{"id":157,"alert_id":"1f73c441-6ebf-4833-a209-ec4bfbc71eff","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":150,"error_events":150,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:12:20.533865+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:20Z"},{"id":156,"alert_id":"e7e6b0e0-37a4-4b5e-afbd-aa7c3eb93195","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":150,"error_events":150,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:12:20.533467+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:20Z"},{"id":155,"alert_id":"4e046061-1f66-4283-bb4c-7b436cd42a91","rule_id":"critical_error_event_rate","rule_name":"Critical Error Event Rate","severity":"critical","status":"active","message":"Rule 'Critical Error Event Rate' triggered: events_per_minute > 30.0 (current=150.0)","details":{"metric":"events_per_minute","threshold":30.0,"operator":">","count":150,"window_seconds":60,"current_value":150.0},"source":"engine","fired_at":"2026-05-18T19:12:20.533113+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:20Z"},{"id":154,"alert_id":"23ffc581-772d-4181-a0ad-fc04911f6388","rule_id":"high_error_event_rate","rule_name":"High Error Event Rate","severity":"high","status":"active","message":"Rule 'High Error Event Rate' triggered: events_per_minute > 10.0 (current=150.0)","details":{"metric":"events_per_minute","threshold":10.0,"operator":">","count":150,"window_seconds":60,"current_value":150.0},"source":"engine","fired_at":"2026-05-18T19:12:20.532505+00:00","resolved_at":null,"created_at":"2026-05-18T19:12:20Z"},{"id":153,"alert_id":"a23a38ea-2aa5-4b25-a305-548924089e04","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["9d6b4e54-655e-4212-9e47-586d07f5b7b6","a6a7fff3-6dcd-4479-9da6-3c79233dfc7f","60131ef1-b6a8-48c3-9050-89e48000c47a","46578e69-da6b-405d-917b-6085e4068972","5ee676e5-61c8-485c-a120-939be198be91"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-18T19:11:50.522809+00:00","resolved_at":null,"created_at":"2026-05-18T19:11:50Z"},{"id":152,"alert_id":"9fd6cd7d-88cc-415f-acbb-e0a304df5f83","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["9d6b4e54-655e-4212-9e47-586d07f5b7b6","a6a7fff3-6dcd-4479-9da6-3c79233dfc7f","60131ef1-b6a8-48c3-9050-89e48000c47a","46578e69-da6b-405d-917b-6085e4068972","5ee676e5-61c8-485c-a120-939be198be91"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:11:50.522759+00:00","resolved_at":null,"created_at":"2026-05-18T19:11:50Z"},{"id":151,"alert_id":"e7fc8755-fe65-4c6c-9bb9-093d1f34c883","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["9d6b4e54-655e-4212-9e47-586d07f5b7b6","a6a7fff3-6dcd-4479-9da6-3c79233dfc7f","60131ef1-b6a8-48c3-9050-89e48000c47a","46578e69-da6b-405d-917b-6085e4068972","5ee676e5-61c8-485c-a120-939be198be91"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-18T19:11:50.522690+00:00","resolved_at":null,"created_at":"2026-05-18T19:11:50Z"},{"id":150,"alert_id":"a867954b-72d9-4de2-8217-2323dfd8a5f9","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":150,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:11:50.521794+00:00","resolved_at":null,"created_at":"2026-05-18T19:11:50Z"},{"id":149,"alert_id":"834c0124-349a-438a-bff7-d0e1f6a8668a","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":150,"current_value":12000},"source":"engine","fired_at":"2026-05-18T19:11:50.520997+00:00","resolved_at":null,"created_at":"2026-05-18T19:11:50Z"},{"id":148,"alert_id":"dca01c66-a6dd-4109-a6eb-47b4a0e9ea1b","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":150,"error_events":150,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:11:50.520172+00:00","resolved_at":null,"created_at":"2026-05-18T19:11:50Z"},{"id":147,"alert_id":"2dc33772-7d21-4bf2-a02d-afb8fd594952","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":150,"error_events":150,"current_value":100.0},"source":"engine","fired_at":"2026-05-18T19:11:50.519793+00:00","resolved_at":null,"created_at":"2026-05-18T19:11:50Z"},{"id":146,"alert_id":"345953ae-e2bb-48a8-8ec2-7ed9f11c9732","rule_id":"critical_error_event_rate","rule_name":"Critical Error Event Rate","severity":"critical","status":"active","message":"Rule 'Critical Error Event Rate' triggered: events_per_minute > 30.0 (current=150.0)","details":{"metric":"events_per_minute","threshold":30.0,"operator":">","count":150,"window_seconds":60,"current_value":150.0},"source":"engine","fired_at":"2026-05-18T19:11:50.519107+00:00","resolved_at":null,"created_at":"2026-05-18T19:11:50Z"},{"id":145,"alert_id":"f3a2c4bf-842a-4445-8f9a-bd98cd5faf42","rule_id":"high_error_event_rate","rule_name":"High Error Event Rate","severity":"high","status":"active","message":"Rule 'High Error Event Rate' triggered: events_per_minute > 10.0 (current=150.0)","details":{"metric":"events_per_minute","threshold":10.0,"operator":">","count":150,"window_seconds":60,"current_value":150.0},"source":"engine","fired_at":"2026-05-18T19:11:50.518692+00:00","resolved_at":null,"created_at":"2026-05-18T19:11:50Z"},{"id":144,"alert_id":"b5f037dc-dc98-4060-936d-473ac0fe3da9","rule_id":null,"rule_name":"Event Burst from 'scheduler'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'scheduler' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["scheduler"],"event_ids":["a8b03d81-ff4f-4d28-a18e-e9230fd0a92e","fc45d023-9d80-4173-955e-e9af5ea54748","f0f2e1fb-4b71-43f6-9d01-25fe9106b1da","14bbf60b-e678-4ac1-96f5-dbd6c268acf2","cabda99c-0b49-4bc6-983c-eebac88d1c5e"],"llm_summary":"[MOCK] Event Burst from 'scheduler'","mock":true},"source":"llm","fired_at":"2026-05-18T19:07:50.513392+00:00","resolved_at":null,"created_at":"2026-05-18T19:07:50Z"},{"id":143,"alert_id":"1c9d7f40-337f-491b-a501-0e674c602f27","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 5 events with duration_ms exceeding 3000ms. Worst observed: 14715ms from 'db-proxy'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service","scheduler","db-proxy"],"event_ids":["fc45d023-9d80-4173-955e-e9af5ea54748","cabda99c-0b49-4bc6-983c-eebac88d1c5e","fb9836f4-1e9a-4632-887d-7ec91686e90d","a7c35f92-be02-461a-a71f-2577b723753e","da1b8b8d-a0a4-4094-b025-2a41379e4035"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:07:50.513323+00:00","resolved_at":null,"created_at":"2026-05-18T19:07:50Z"},{"id":142,"alert_id":"ef9ae667-b91d-4e85-a751-9607b1de4a8a","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=14715)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":20,"current_value":14715},"source":"engine","fired_at":"2026-05-18T19:07:50.512699+00:00","resolved_at":null,"created_at":"2026-05-18T19:07:50Z"},{"id":141,"alert_id":"9a1cb63a-5148-4358-9562-51b57de0031d","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14715)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":20,"current_value":14715},"source":"engine","fired_at":"2026-05-18T19:07:50.512223+00:00","resolved_at":null,"created_at":"2026-05-18T19:07:50Z"},{"id":140,"alert_id":"d8c4a0e5-f9f2-449f-9a43-04f83bc92416","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=25.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":20,"error_events":5,"current_value":25.0},"source":"engine","fired_at":"2026-05-18T19:07:50.511561+00:00","resolved_at":null,"created_at":"2026-05-18T19:07:50Z"},{"id":139,"alert_id":"9bfb7782-c5f1-4eb8-84d7-87fa7937ee11","rule_id":null,"rule_name":"Event Burst from 'scheduler'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'scheduler' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["scheduler"],"event_ids":["a8b03d81-ff4f-4d28-a18e-e9230fd0a92e","fc45d023-9d80-4173-955e-e9af5ea54748","f0f2e1fb-4b71-43f6-9d01-25fe9106b1da","14bbf60b-e678-4ac1-96f5-dbd6c268acf2","cabda99c-0b49-4bc6-983c-eebac88d1c5e"],"llm_summary":"[MOCK] Event Burst from 'scheduler'","mock":true},"source":"llm","fired_at":"2026-05-18T19:07:20.511900+00:00","resolved_at":null,"created_at":"2026-05-18T19:07:20Z"},{"id":138,"alert_id":"a88df763-be78-4aec-9575-c9f7a49a3b0e","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 5 events with duration_ms exceeding 3000ms. Worst observed: 14715ms from 'db-proxy'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service","scheduler","db-proxy"],"event_ids":["fc45d023-9d80-4173-955e-e9af5ea54748","cabda99c-0b49-4bc6-983c-eebac88d1c5e","fb9836f4-1e9a-4632-887d-7ec91686e90d","a7c35f92-be02-461a-a71f-2577b723753e","da1b8b8d-a0a4-4094-b025-2a41379e4035"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-18T19:07:20.511804+00:00","resolved_at":null,"created_at":"2026-05-18T19:07:20Z"},{"id":137,"alert_id":"33826cb0-673e-429b-a603-70190c2a344e","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=14715)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":20,"current_value":14715},"source":"engine","fired_at":"2026-05-18T19:07:20.500866+00:00","resolved_at":null,"created_at":"2026-05-18T19:07:20Z"}]}