{"total":100,"alerts":[{"id":501,"alert_id":"5e831b07-f9c1-45fb-9e6f-ae31dec0bf0c","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-20T00:01:34.935440+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:34Z"},{"id":500,"alert_id":"55254022-014a-418c-85bd-8b6c3e9d08da","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-20T00:01:34.935424+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:34Z"},{"id":499,"alert_id":"432683f7-d012-4f03-aa3b-00d6b39a55e9","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-20T00:01:34.935403+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:34Z"},{"id":498,"alert_id":"b9b6c2b2-b0e8-4fd0-8875-17b02f5edc13","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-20T00:01:34.935324+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:34Z"},{"id":497,"alert_id":"1c62a724-4e9b-44e6-b5de-d757c38e1570","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12620)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":210,"current_value":12620},"source":"engine","fired_at":"2026-05-20T00:01:34.934331+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:34Z"},{"id":496,"alert_id":"ddf2414f-340e-41a0-9f88-75ce3c09e168","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":210,"current_value":14796},"source":"engine","fired_at":"2026-05-20T00:01:34.932931+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:34Z"},{"id":495,"alert_id":"c0ce814c-f5a5-46be-9fac-cc13e900bf74","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=52.8571)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":210,"error_events":111,"current_value":52.8571},"source":"engine","fired_at":"2026-05-20T00:01:34.931143+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:34Z"},{"id":494,"alert_id":"276475fe-c568-4a3f-9d19-eb2b2feb4fee","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-20T00:01:04.929704+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:04Z"},{"id":493,"alert_id":"0c6e14bd-e7a3-490e-8479-23ed1d1562a2","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-20T00:01:04.929687+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:04Z"},{"id":492,"alert_id":"803c8caf-cf01-41dd-b72a-afe6f99985dd","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-20T00:01:04.929661+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:04Z"},{"id":491,"alert_id":"3a414bce-c71a-4f14-a4f8-c51e1471ed0e","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-20T00:01:04.929524+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:04Z"},{"id":490,"alert_id":"9cd8436d-99ed-4808-a0e2-a8e27f3322b5","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":12000},"source":"engine","fired_at":"2026-05-20T00:01:04.928501+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:04Z"},{"id":489,"alert_id":"7d156628-8654-4061-82ac-60c9134ae8cb","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":14796},"source":"engine","fired_at":"2026-05-20T00:01:04.927075+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:04Z"},{"id":488,"alert_id":"5cfe60a2-98a6-42ab-ba01-033398416ef3","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=61.9231)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":260,"error_events":161,"current_value":61.9231},"source":"engine","fired_at":"2026-05-20T00:01:04.923849+00:00","resolved_at":null,"created_at":"2026-05-20T00:01:04Z"},{"id":487,"alert_id":"90c1f8eb-0918-438d-9c04-f504eafa3a8f","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-20T00:00:34.912968+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:34Z"},{"id":486,"alert_id":"4ef57ffa-93d1-4286-aaa2-2038c0f361de","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-20T00:00:34.912952+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:34Z"},{"id":485,"alert_id":"2d62c03f-ad7d-4312-86d3-48a7da2cbf3d","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-20T00:00:34.912930+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:34Z"},{"id":484,"alert_id":"887691fd-175c-471a-a371-616fb7835eec","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-20T00:00:34.912846+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:34Z"},{"id":483,"alert_id":"cd70e773-daa4-4a89-9dd4-197160f9841f","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":12000},"source":"engine","fired_at":"2026-05-20T00:00:34.911744+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:34Z"},{"id":482,"alert_id":"b9a20adb-65b5-4576-8dd3-fc7f3a6b2744","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":14796},"source":"engine","fired_at":"2026-05-20T00:00:34.910221+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:34Z"},{"id":481,"alert_id":"38e546c1-3fff-457b-b750-f89fa83d4cfb","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=61.9231)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":260,"error_events":161,"current_value":61.9231},"source":"engine","fired_at":"2026-05-20T00:00:34.908019+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:34Z"},{"id":480,"alert_id":"d5af68ed-2c81-4a7a-afd3-8fd38e4c5101","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-20T00:00:04.842982+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:04Z"},{"id":479,"alert_id":"f2b8b234-8330-4717-a8cc-ef86da2bdcd3","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-20T00:00:04.842955+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:04Z"},{"id":478,"alert_id":"d47c6b63-1bea-4eed-bb40-480b93afc319","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-20T00:00:04.842921+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:04Z"},{"id":477,"alert_id":"ec95f0ba-2cf6-48d9-aa8e-7b3e2bb53d41","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-20T00:00:04.842764+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:04Z"},{"id":476,"alert_id":"c6f1ea33-558f-41eb-8c8e-618025927674","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":12000},"source":"engine","fired_at":"2026-05-20T00:00:04.795243+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:04Z"},{"id":475,"alert_id":"e87564a4-6f7d-423d-9d25-22c5a51d6726","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":14796},"source":"engine","fired_at":"2026-05-20T00:00:04.767292+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:04Z"},{"id":474,"alert_id":"8b858f80-3c95-49ed-af7e-9ca6bd20ea49","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=61.9231)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":260,"error_events":161,"current_value":61.9231},"source":"engine","fired_at":"2026-05-20T00:00:04.740591+00:00","resolved_at":null,"created_at":"2026-05-20T00:00:04Z"},{"id":473,"alert_id":"36c43a9b-76a3-4f4d-b2fc-686d080984d7","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:59:34.729197+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:34Z"},{"id":472,"alert_id":"1a20d518-fd19-44ce-9506-1e24fb5bdfc5","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-19T23:59:34.729181+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:34Z"},{"id":471,"alert_id":"633b7ee4-d9a0-4a7a-aee8-adf06d55ccd8","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-19T23:59:34.729160+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:34Z"},{"id":470,"alert_id":"12f901a4-e24e-4bde-9b65-456fd556c635","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:59:34.729080+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:34Z"},{"id":469,"alert_id":"998414cd-3534-404c-bd55-34341d53300c","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:59:34.728084+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:34Z"},{"id":468,"alert_id":"e1186a2c-1d2c-4775-8817-d17234b86f36","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":14796},"source":"engine","fired_at":"2026-05-19T23:59:34.726650+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:34Z"},{"id":467,"alert_id":"fd279ee2-7ae7-4a52-b9de-7944f9c67031","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=61.9231)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":260,"error_events":161,"current_value":61.9231},"source":"engine","fired_at":"2026-05-19T23:59:34.724522+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:34Z"},{"id":466,"alert_id":"24a683c3-70fc-47f1-bbfb-29d4d4c4474f","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:59:04.722855+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:04Z"},{"id":465,"alert_id":"b7eaddc2-8222-4f3c-bf48-122cc3917d6c","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-19T23:59:04.722840+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:04Z"},{"id":464,"alert_id":"6bc4f237-ab8a-47b5-8c6a-b64e0570ede7","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-19T23:59:04.722819+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:04Z"},{"id":463,"alert_id":"52b30590-ca49-44c3-b3bc-4cb810b98d99","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:59:04.722733+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:04Z"},{"id":462,"alert_id":"bd66e9b5-abad-4e44-ad8d-6fdfef84eae1","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:59:04.721468+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:04Z"},{"id":461,"alert_id":"fe70007b-16a8-4209-81ea-185821700aed","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":14796},"source":"engine","fired_at":"2026-05-19T23:59:04.720026+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:04Z"},{"id":460,"alert_id":"0ce523ab-f7a1-4528-9a48-c208469efd3f","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=61.9231)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":260,"error_events":161,"current_value":61.9231},"source":"engine","fired_at":"2026-05-19T23:59:04.718072+00:00","resolved_at":null,"created_at":"2026-05-19T23:59:04Z"},{"id":459,"alert_id":"e6b53ef3-5cbd-4384-81da-d75c641b8391","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:58:34.717167+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:34Z"},{"id":458,"alert_id":"33eb4d46-f28a-4048-8a48-e57e4661984e","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-19T23:58:34.717151+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:34Z"},{"id":457,"alert_id":"16828e27-8efc-4895-be52-2b5056820b9d","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-19T23:58:34.717129+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:34Z"},{"id":456,"alert_id":"5499211f-f807-4534-a389-9222b83b8f11","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:58:34.717047+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:34Z"},{"id":455,"alert_id":"41833b79-539d-4b4d-808b-1aec0941c45d","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:58:34.715988+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:34Z"},{"id":454,"alert_id":"2e96e17c-6c88-414e-834c-1263e7133b1c","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":14796},"source":"engine","fired_at":"2026-05-19T23:58:34.714454+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:34Z"},{"id":453,"alert_id":"a7e8c424-e9b2-431d-bcc3-047e7ee1b011","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=61.9231)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":260,"error_events":161,"current_value":61.9231},"source":"engine","fired_at":"2026-05-19T23:58:34.711187+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:34Z"},{"id":452,"alert_id":"9dc710c9-2312-4e85-880a-8753c85e1005","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:58:04.702012+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:04Z"},{"id":451,"alert_id":"49da81c6-ca92-4c2e-b3c1-ee84ea3b99f6","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-19T23:58:04.701996+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:04Z"},{"id":450,"alert_id":"2e5c3102-f8a4-4ca2-b096-8052d3757650","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-19T23:58:04.701976+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:04Z"},{"id":449,"alert_id":"54e4d902-14c3-4e54-a460-4860a49c2c3e","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:58:04.701889+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:04Z"},{"id":448,"alert_id":"051ccbef-f992-46c6-ae6c-b4036e95edd8","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:58:04.700683+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:04Z"},{"id":447,"alert_id":"34e57eaf-c474-471c-b935-196a641ddc83","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":14796},"source":"engine","fired_at":"2026-05-19T23:58:04.699176+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:04Z"},{"id":446,"alert_id":"6a5e90cf-a09f-40c4-ad66-be7f0695934d","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=61.9231)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":260,"error_events":161,"current_value":61.9231},"source":"engine","fired_at":"2026-05-19T23:58:04.697082+00:00","resolved_at":null,"created_at":"2026-05-19T23:58:04Z"},{"id":445,"alert_id":"019b3f84-a415-43ea-8be4-881b27931f8d","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:57:34.694911+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:34Z"},{"id":444,"alert_id":"a5c53b5a-59df-4417-b888-7fb536e11589","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-19T23:57:34.694895+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:34Z"},{"id":443,"alert_id":"960c80f5-ee8b-4d5a-85aa-615d5f92d2a2","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-19T23:57:34.694872+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:34Z"},{"id":442,"alert_id":"fcd99f5b-f9e4-4e01-815a-b0e295687970","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:57:34.694783+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:34Z"},{"id":441,"alert_id":"f5482683-39e0-4fb6-b2cf-dac4b11bc7a1","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:57:34.693802+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:34Z"},{"id":440,"alert_id":"018d0258-3125-457c-96c9-56fecc9b9d11","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":14796},"source":"engine","fired_at":"2026-05-19T23:57:34.692360+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:34Z"},{"id":439,"alert_id":"68ce60d1-6281-4778-9ce3-edb6aa497038","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=61.9231)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":260,"error_events":161,"current_value":61.9231},"source":"engine","fired_at":"2026-05-19T23:57:34.690694+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:34Z"},{"id":438,"alert_id":"d1a593c4-6d7a-4035-9d97-2dc61de62d5a","rule_id":"critical_error_event_rate","rule_name":"Critical Error Event Rate","severity":"critical","status":"active","message":"Rule 'Critical Error Event Rate' triggered: events_per_minute > 30.0 (current=84.0)","details":{"metric":"events_per_minute","threshold":30.0,"operator":">","count":84,"window_seconds":60,"current_value":84.0},"source":"engine","fired_at":"2026-05-19T23:57:34.689937+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:34Z"},{"id":437,"alert_id":"4f06d7bd-6cd5-4702-85d1-6f07b506e583","rule_id":"high_error_event_rate","rule_name":"High Error Event Rate","severity":"high","status":"active","message":"Rule 'High Error Event Rate' triggered: events_per_minute > 10.0 (current=84.0)","details":{"metric":"events_per_minute","threshold":10.0,"operator":">","count":84,"window_seconds":60,"current_value":84.0},"source":"engine","fired_at":"2026-05-19T23:57:34.689255+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:34Z"},{"id":436,"alert_id":"4cd0a81b-7da9-41c8-a94a-e303e10b9e9c","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 9 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["142436c9-af13-494a-a9e8-956b7dc1920d","af83368d-3f15-426c-b960-fa4e71a33e9a","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","aee765b9-9152-4ea2-a86b-93a92dd62375","4b1615b8-ff5d-49aa-9c2c-47031160db81"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:57:04.679253+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:04Z"},{"id":435,"alert_id":"14a15ee1-b342-40de-a415-2f271f1003d2","rule_id":null,"rule_name":"Event Burst from 'api-gateway'","severity":"medium","status":"active","message":"Mock analysis observed 10 events from 'api-gateway' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["api-gateway"],"event_ids":["26efdaa4-da24-4954-a243-2d092a262998","5dd816aa-d544-4675-aef0-20be57a071a7","b4887044-19c5-4b46-8642-a3f3ae591732","d53e9a22-506f-499b-8fe7-393a85cdf71f","7e4b903e-1678-48a4-b4c5-9025db67fe2b"],"llm_summary":"[MOCK] Event Burst from 'api-gateway'","mock":true},"source":"llm","fired_at":"2026-05-19T23:57:04.679237+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:04Z"},{"id":434,"alert_id":"1b3de128-f75e-43e0-969c-553b963f7670","rule_id":null,"rule_name":"Event Burst from 'worker'","severity":"medium","status":"active","message":"Mock analysis observed 11 events from 'worker' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["worker"],"event_ids":["2ce0b0d9-399d-4444-9019-b26fefb58338","dff35808-9337-40ca-b735-d042e4ea5d5d","958c7f4f-4558-4837-a396-6a8b7500f44f","563b5f74-14a4-4775-94a8-bf2a48f55723","98a13bbb-af27-467a-bc49-a761c0dfd166"],"llm_summary":"[MOCK] Event Burst from 'worker'","mock":true},"source":"llm","fired_at":"2026-05-19T23:57:04.679216+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:04Z"},{"id":433,"alert_id":"fcae0dd9-06b0-488b-9b1f-edd3a8f53c3e","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 17 events with duration_ms exceeding 3000ms. Worst observed: 14796ms from 'scheduler'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["api-gateway","worker","scheduler","db-proxy","auth-service","payment-service"],"event_ids":["9c762ee8-0568-421b-8239-e400b130fa06","ae84de26-3488-48db-8197-333aa84df685","d59618e7-7133-488c-ab27-1e7ec03337c2","df0546f9-f96f-44b6-8cfa-ea2ce9bceb9a","2dc09486-2bcf-4ad0-a176-cbd3711d13bc"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:57:04.679130+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:04Z"},{"id":432,"alert_id":"4eb85b25-fd5e-4645-b801-53c7ce0e7747","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:57:04.678128+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:04Z"},{"id":431,"alert_id":"ed067610-fd2c-434a-a731-32b61d5690f0","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=14796)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":260,"current_value":14796},"source":"engine","fired_at":"2026-05-19T23:57:04.676692+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:04Z"},{"id":430,"alert_id":"32a821ee-f2a1-42f2-9040-15fad8d6f1b0","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=61.9231)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":260,"error_events":161,"current_value":61.9231},"source":"engine","fired_at":"2026-05-19T23:57:04.674936+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:04Z"},{"id":429,"alert_id":"28d63b16-567c-4e5b-b6ef-1d913e244fdc","rule_id":"critical_error_event_rate","rule_name":"Critical Error Event Rate","severity":"critical","status":"active","message":"Rule 'Critical Error Event Rate' triggered: events_per_minute > 30.0 (current=134.0)","details":{"metric":"events_per_minute","threshold":30.0,"operator":">","count":134,"window_seconds":60,"current_value":134.0},"source":"engine","fired_at":"2026-05-19T23:57:04.674131+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:04Z"},{"id":428,"alert_id":"de865fa1-a7e3-4590-8b21-8fba587cb145","rule_id":"high_error_event_rate","rule_name":"High Error Event Rate","severity":"high","status":"active","message":"Rule 'High Error Event Rate' triggered: events_per_minute > 10.0 (current=134.0)","details":{"metric":"events_per_minute","threshold":10.0,"operator":">","count":134,"window_seconds":60,"current_value":134.0},"source":"engine","fired_at":"2026-05-19T23:57:04.673439+00:00","resolved_at":null,"created_at":"2026-05-19T23:57:04Z"},{"id":427,"alert_id":"0c09cdac-60cf-4f42-8b36-fd3667bab6a7","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["6bea044b-7df5-43c0-b05e-e019ee4407f2","2eb609e9-1e69-41b4-9bf8-92c7fc85854f","4c341230-9dcf-4772-a58c-489d5da78a2b","53a9f87d-d2ee-45fa-a0b6-e38635ee0bb6","b98cae19-d97d-4e84-ac9d-c69be3bf938e"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:56:34.662375+00:00","resolved_at":null,"created_at":"2026-05-19T23:56:34Z"},{"id":426,"alert_id":"ea114b83-6d8e-4a85-842d-eda2361287a4","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["6bea044b-7df5-43c0-b05e-e019ee4407f2","2eb609e9-1e69-41b4-9bf8-92c7fc85854f","4c341230-9dcf-4772-a58c-489d5da78a2b","53a9f87d-d2ee-45fa-a0b6-e38635ee0bb6","b98cae19-d97d-4e84-ac9d-c69be3bf938e"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:56:34.662231+00:00","resolved_at":null,"created_at":"2026-05-19T23:56:34Z"},{"id":425,"alert_id":"4d9cc3c2-cddf-4369-8b69-652a494df651","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["6bea044b-7df5-43c0-b05e-e019ee4407f2","2eb609e9-1e69-41b4-9bf8-92c7fc85854f","4c341230-9dcf-4772-a58c-489d5da78a2b","53a9f87d-d2ee-45fa-a0b6-e38635ee0bb6","b98cae19-d97d-4e84-ac9d-c69be3bf938e"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-19T23:56:34.662174+00:00","resolved_at":null,"created_at":"2026-05-19T23:56:34Z"},{"id":424,"alert_id":"bdb4c380-8210-4fb4-b2c0-3000c8b7403f","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":50,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:56:34.661119+00:00","resolved_at":null,"created_at":"2026-05-19T23:56:34Z"},{"id":423,"alert_id":"dd27458b-2f44-402c-b464-52e9657a90ff","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":50,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:56:34.660644+00:00","resolved_at":null,"created_at":"2026-05-19T23:56:34Z"},{"id":422,"alert_id":"06b9b816-af38-4e94-b913-165b7e5bdb4b","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":50,"error_events":50,"current_value":100.0},"source":"engine","fired_at":"2026-05-19T23:56:34.660119+00:00","resolved_at":null,"created_at":"2026-05-19T23:56:34Z"},{"id":421,"alert_id":"08b7f36e-47d2-493f-9e71-2d24dc7835e2","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":50,"error_events":50,"current_value":100.0},"source":"engine","fired_at":"2026-05-19T23:56:34.659469+00:00","resolved_at":null,"created_at":"2026-05-19T23:56:34Z"},{"id":420,"alert_id":"488e485c-74f1-473f-a7ab-3028c309dcea","rule_id":"critical_error_event_rate","rule_name":"Critical Error Event Rate","severity":"critical","status":"active","message":"Rule 'Critical Error Event Rate' triggered: events_per_minute > 30.0 (current=50.0)","details":{"metric":"events_per_minute","threshold":30.0,"operator":">","count":50,"window_seconds":60,"current_value":50.0},"source":"engine","fired_at":"2026-05-19T23:56:34.658824+00:00","resolved_at":null,"created_at":"2026-05-19T23:56:34Z"},{"id":419,"alert_id":"26413cf4-f13f-4fa9-bc6c-bebb4b54e2bb","rule_id":"high_error_event_rate","rule_name":"High Error Event Rate","severity":"high","status":"active","message":"Rule 'High Error Event Rate' triggered: events_per_minute > 10.0 (current=50.0)","details":{"metric":"events_per_minute","threshold":10.0,"operator":">","count":50,"window_seconds":60,"current_value":50.0},"source":"engine","fired_at":"2026-05-19T23:56:34.658295+00:00","resolved_at":null,"created_at":"2026-05-19T23:56:34Z"},{"id":418,"alert_id":"3b2d8b65-17e5-4158-8491-c728e387c1fc","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["16ccaeda-a097-4b3b-8fc4-220cf536dc7c","5dd14177-e536-4aae-a05a-d499e14d7405","51d13eab-bdd0-4d56-baa0-3b364e6094a3","34130c01-c8a8-40c5-ad33-b9d9e1d64146","69bf4add-5ee2-4af1-afd7-ccf278228401"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:33:04.269021+00:00","resolved_at":null,"created_at":"2026-05-19T23:33:04Z"},{"id":417,"alert_id":"79c56e22-f054-4acc-bedb-139696d62942","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["16ccaeda-a097-4b3b-8fc4-220cf536dc7c","5dd14177-e536-4aae-a05a-d499e14d7405","51d13eab-bdd0-4d56-baa0-3b364e6094a3","34130c01-c8a8-40c5-ad33-b9d9e1d64146","69bf4add-5ee2-4af1-afd7-ccf278228401"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:33:04.268968+00:00","resolved_at":null,"created_at":"2026-05-19T23:33:04Z"},{"id":416,"alert_id":"5e967162-2657-43de-9b7b-c8640faab2ea","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["16ccaeda-a097-4b3b-8fc4-220cf536dc7c","5dd14177-e536-4aae-a05a-d499e14d7405","51d13eab-bdd0-4d56-baa0-3b364e6094a3","34130c01-c8a8-40c5-ad33-b9d9e1d64146","69bf4add-5ee2-4af1-afd7-ccf278228401"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-19T23:33:04.268911+00:00","resolved_at":null,"created_at":"2026-05-19T23:33:04Z"},{"id":415,"alert_id":"5743ead9-53bb-422d-890f-2fcaa9850257","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":50,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:33:04.267760+00:00","resolved_at":null,"created_at":"2026-05-19T23:33:04Z"},{"id":414,"alert_id":"19fec2ec-2ec1-46a2-a8a6-c0dceef81347","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":50,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:33:04.267028+00:00","resolved_at":null,"created_at":"2026-05-19T23:33:04Z"},{"id":413,"alert_id":"72f06544-9368-47a4-b1f9-eec14a7312c8","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":50,"error_events":50,"current_value":100.0},"source":"engine","fired_at":"2026-05-19T23:33:04.266225+00:00","resolved_at":null,"created_at":"2026-05-19T23:33:04Z"},{"id":412,"alert_id":"3d6e4b31-9a68-4b15-beb4-66f11582ec3b","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":50,"error_events":50,"current_value":100.0},"source":"engine","fired_at":"2026-05-19T23:33:04.265307+00:00","resolved_at":null,"created_at":"2026-05-19T23:33:04Z"},{"id":411,"alert_id":"129ab6de-3265-4858-9b5c-a26e3ff261a2","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["16ccaeda-a097-4b3b-8fc4-220cf536dc7c","5dd14177-e536-4aae-a05a-d499e14d7405","51d13eab-bdd0-4d56-baa0-3b364e6094a3","34130c01-c8a8-40c5-ad33-b9d9e1d64146","69bf4add-5ee2-4af1-afd7-ccf278228401"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:32:34.264140+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:34Z"},{"id":410,"alert_id":"ac81e8b1-a337-469e-acc0-fbdae74867e0","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["16ccaeda-a097-4b3b-8fc4-220cf536dc7c","5dd14177-e536-4aae-a05a-d499e14d7405","51d13eab-bdd0-4d56-baa0-3b364e6094a3","34130c01-c8a8-40c5-ad33-b9d9e1d64146","69bf4add-5ee2-4af1-afd7-ccf278228401"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:32:34.264087+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:34Z"},{"id":409,"alert_id":"a4278649-7c72-4322-8d39-7f8b131e3e4b","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["16ccaeda-a097-4b3b-8fc4-220cf536dc7c","5dd14177-e536-4aae-a05a-d499e14d7405","51d13eab-bdd0-4d56-baa0-3b364e6094a3","34130c01-c8a8-40c5-ad33-b9d9e1d64146","69bf4add-5ee2-4af1-afd7-ccf278228401"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-19T23:32:34.264034+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:34Z"},{"id":408,"alert_id":"6de3790e-3786-4ee9-87a8-54d989cddb60","rule_id":"p95_latency_warning","rule_name":"P95 Latency Warning","severity":"medium","status":"active","message":"Rule 'P95 Latency Warning' triggered: p95 > 2000.0 (current=12000)","details":{"metric":"p95","threshold":2000.0,"operator":">","field":"duration_ms","sample_count":50,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:32:34.263124+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:34Z"},{"id":407,"alert_id":"c40ada78-ec1c-4f6e-a81b-75d152afffeb","rule_id":"p99_latency_breach","rule_name":"P99 Latency SLO Breach","severity":"critical","status":"active","message":"Rule 'P99 Latency SLO Breach' triggered: p99 > 5000.0 (current=12000)","details":{"metric":"p99","threshold":5000.0,"operator":">","field":"duration_ms","sample_count":50,"current_value":12000},"source":"engine","fired_at":"2026-05-19T23:32:34.262635+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:34Z"},{"id":406,"alert_id":"9b127552-88cc-4a2e-a744-55335beb514d","rule_id":"critical_error_rate_threshold","rule_name":"Critical Error Rate Threshold","severity":"critical","status":"active","message":"Rule 'Critical Error Rate Threshold' triggered: error_rate >= 80.0 (current=100.0)","details":{"metric":"error_rate","threshold":80.0,"operator":">=","total_events":50,"error_events":50,"current_value":100.0},"source":"engine","fired_at":"2026-05-19T23:32:34.262035+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:34Z"},{"id":405,"alert_id":"bd8449f2-c16f-4fee-84a6-496a845b55f7","rule_id":"high_overall_error_rate","rule_name":"High Overall Error Rate","severity":"high","status":"active","message":"Rule 'High Overall Error Rate' triggered: error_rate > 20.0 (current=100.0)","details":{"metric":"error_rate","threshold":20.0,"operator":">","total_events":50,"error_events":50,"current_value":100.0},"source":"engine","fired_at":"2026-05-19T23:32:34.261120+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:34Z"},{"id":404,"alert_id":"329dd28f-72dd-4b43-b800-0fe57bff931c","rule_id":null,"rule_name":"Event Burst from 'payment-service'","severity":"medium","status":"active","message":"Mock analysis observed 50 events from 'payment-service' in a 300s window -- significantly above baseline. This may indicate a retry storm, misconfigured emitter, or runaway process.","details":{"affected_sources":["payment-service"],"event_ids":["16ccaeda-a097-4b3b-8fc4-220cf536dc7c","5dd14177-e536-4aae-a05a-d499e14d7405","51d13eab-bdd0-4d56-baa0-3b364e6094a3","34130c01-c8a8-40c5-ad33-b9d9e1d64146","69bf4add-5ee2-4af1-afd7-ccf278228401"],"llm_summary":"[MOCK] Event Burst from 'payment-service'","mock":true},"source":"llm","fired_at":"2026-05-19T23:32:04.258954+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:04Z"},{"id":403,"alert_id":"bba2ce48-636d-4489-a393-007a63d50745","rule_id":null,"rule_name":"Latency Spike Identified","severity":"critical","status":"active","message":"Mock analysis detected 50 events with duration_ms exceeding 3000ms. Worst observed: 12000ms from 'payment-service'. SLO breach is likely if this persists beyond the current window.","details":{"affected_sources":["payment-service"],"event_ids":["16ccaeda-a097-4b3b-8fc4-220cf536dc7c","5dd14177-e536-4aae-a05a-d499e14d7405","51d13eab-bdd0-4d56-baa0-3b364e6094a3","34130c01-c8a8-40c5-ad33-b9d9e1d64146","69bf4add-5ee2-4af1-afd7-ccf278228401"],"llm_summary":"[MOCK] Latency Spike Identified","mock":true},"source":"llm","fired_at":"2026-05-19T23:32:04.258899+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:04Z"},{"id":402,"alert_id":"22d10c5b-ebe0-48c3-8d8a-1c7c8ad89665","rule_id":null,"rule_name":"Elevated Error Rate Detected","severity":"high","status":"active","message":"Mock analysis found 50 of 50 events (100%) are critical or high severity in the last 300s window. This pattern often precedes a cascade failure -- investigate the top sources.","details":{"affected_sources":["payment-service"],"event_ids":["16ccaeda-a097-4b3b-8fc4-220cf536dc7c","5dd14177-e536-4aae-a05a-d499e14d7405","51d13eab-bdd0-4d56-baa0-3b364e6094a3","34130c01-c8a8-40c5-ad33-b9d9e1d64146","69bf4add-5ee2-4af1-afd7-ccf278228401"],"llm_summary":"[MOCK] Elevated Error Rate Detected","mock":true},"source":"llm","fired_at":"2026-05-19T23:32:04.258825+00:00","resolved_at":null,"created_at":"2026-05-19T23:32:04Z"}]}