> ## Documentation Index
> Fetch the complete documentation index at: https://docs.befailproof.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Alerts

> Detect recurrence and route an incident to the right responders.

Alerts watch a measurable condition and create an incident when it triggers. Use them when a failure should produce a timely response, whether or not a policy can block it.

## Create and test an alert

<Tabs>
  <Tab title="Dashboard">
    1. Go to **Analyze → Alerts** and select **new alert**. You can also start from the bell on a representative error.
    2. Enter the name, severity, trigger kind, condition, evaluation interval, breach count, window, and channels.
    3. Save the alert, open its detail page, and run **test**.
    4. Go to **Analyze → Issues** to acknowledge, assign, discuss, subscribe to, and resolve incidents created by the alert.

    The first part of the form identifies the alert and the signal that should trigger it.

    <img src="https://mintcdn.com/exosphere/WgPwQzedeDNwJBTy/images/dashboard/alert-new-trigger.png?fit=max&auto=format&n=WgPwQzedeDNwJBTy&q=85&s=c54a28d895efc633ceb818d134d27bb5" alt="The first part of the new-alert form with its name, description, enabled state, and trigger type." width="1968" height="1510" data-path="images/dashboard/alert-new-trigger.png" />

    The second part controls how long the condition must persist, how often it is evaluated, and where notifications are sent.

    <img src="https://mintcdn.com/exosphere/WgPwQzedeDNwJBTy/images/dashboard/alert-new-routing.png?fit=max&auto=format&n=WgPwQzedeDNwJBTy&q=85&s=a0789e823feaf0598395973da257c6c1" alt="The second part of the new-alert form with breach logic, schedule, severity, delivery channels, and create action." width="1904" height="1442" data-path="images/dashboard/alert-new-routing.png" />

    After saving, use the Alerts list to confirm the rule is enabled and that its trigger, window, severity, and channels match what you intended.

    <img src="https://mintcdn.com/exosphere/WgPwQzedeDNwJBTy/images/dashboard/alerts.png?fit=max&auto=format&n=WgPwQzedeDNwJBTy&q=85&s=b75f8c55c3f276cf3601c1b09d312560" alt="The Alerts page showing alert rules with their triggers, evaluation windows, channels, and severity." width="3200" height="2000" data-path="images/dashboard/alerts.png" />

    Test the alert before depending on it for production response.
  </Tab>

  <Tab title="CLI">
    ```bash theme={null}
    fp alerts create high-errors \
      --trigger-kind metric_threshold \
      --severity warning \
      --trigger-spec '{"metric":"error_count","op":">","value":50,"window_secs":900}'

    fp alerts show high-errors
    fp alerts test high-errors
    fp alerts update high-errors --severity critical --yes
    ```

    Use `fp alerts list` to review rules and `fp alerts delete <name>` to remove one.

    See the [`fp alerts` reference](/reference/cloud-cli#alerts) for the complete alert command set.
  </Tab>
</Tabs>

Alert conditions can be based on errors, evaluation scores, evaluation combinations, or custom SQL. Add recipients, test the rule, and open the resulting incident to acknowledge, assign, comment, subscribe, and resolve it.

## Good alert design

* Name the condition and affected workflow.
* Scope the environment explicitly.
* Set a window and threshold that avoid reacting to one harmless event.
* Include a link or query that leads responders to sessions.
* Assign an owner before enabling the rule.

<Tip>
  After resolving an audit finding, add an alert when the same failure could recur outside the policy's coverage.
</Tip>
