id、组织、created_at、last_eval_at 与 last_state。修改后的 escalation_policy_id 必须是该组织的某个策略，或者是 default。该调用需要 alerts.manage。
事件的指纹由规则 id 与规则 labels 派生。修改 labels 后，已开启的事件保留旧指纹，不再自动解决。请通过解决事件手动解决。
curl -X PUT http://localhost:5080/api/v1/alerts/rules/$RULE_ID \
-H "authorization: Bearer $MS_JWT" \
-H 'content-type: application/json' \
--data-binary @- <<'EOF'
{
"name": "High error rate",
"description": "More than 200 errors in five minutes",
"enabled": true,
"kind": "scheduled",
"query": {
"language": "sql",
"statement": "SELECT count(*) AS c FROM app WHERE level = 'error'",
"period_secs": 300,
"stream": { "name": "app", "stream_type": "logs" }
},
"trigger": { "operator": "gt", "threshold": 200, "for_periods": 2, "silence_secs": 0 },
"severity": "critical",
"labels": { "team": "checkout" }
}
EOF
告警
更新规则
替换告警规则的配置。
curl -X PUT http://localhost:5080/api/v1/alerts/rules/$RULE_ID \
-H "authorization: Bearer $MS_JWT" \
-H 'content-type: application/json' \
--data-binary @- <<'EOF'
{
"name": "High error rate",
"description": "More than 200 errors in five minutes",
"enabled": true,
"kind": "scheduled",
"query": {
"language": "sql",
"statement": "SELECT count(*) AS c FROM app WHERE level = 'error'",
"period_secs": 300,
"stream": { "name": "app", "stream_type": "logs" }
},
"trigger": { "operator": "gt", "threshold": 200, "for_periods": 2, "silence_secs": 0 },
"severity": "critical",
"labels": { "team": "checkout" }
}
EOF
最后修改于 2026年10月26日