Alerts are TigerTrust’s signal that something needs attention — a certificate expiring, a deployment failing, a policy violation, an anomaly. Rules define what to watch, alerts are the fired instances, and channels decide who hears about it.
Alerts

​
What it is

An alert is created when a built-in trigger condition is met. It carries a severity (low, medium, high, critical), a trigger type, and a link to the affected resource. Alerts stay open until a human acknowledges or resolves them. Duplicate alerts within a suppression window collapse into a single entry with an increasing occurrence count.

​
When to use it

  • Get paged when a certificate tagged prod is within 7 days of expiry.
  • Route renewal failures to the platform team’s Slack channel.
  • Escalate an unacknowledged alert to a secondary on-call if nobody acts within 15 minutes.
  • Suppress low-severity alerts for certificates in a planned-decommission workflow.
  • Raise an alert any time a Certificate Transparency mis-issuance is detected.

​
Built-in triggers

TriggerDefault thresholdDefault severity
certificate.expiring30 / 14 / 7 / 1 dayslow to critical
certificate.expiredOn expirycritical
renewal.failedOn failurehigh
deployment.failedOn failurehigh
policy.violationOn violationmedium to high
anomaly.detectedScored automaticallylow to critical
ct.misissuanceNew entry outside your CA allow-listhigh
agent.offlineNo heartbeat for 5 minutesmedium
ca.certificate.expiring180 / 90 dayscritical
crl.staleNextUpdate minus 24 hourshigh

​
Set it up

1

Open the alert rule editor

Go to Monitoring > Alert rules and click New rule.
2

Choose a trigger

Select one of the built-in triggers from the dropdown. The trigger determines which alerts the rule evaluates.
3

Add conditions

Build a condition tree to narrow the rule — for example, severity equals critical and certificate tags contains prod. Use All of (AND) or Any of (OR) wrappers.
4

Set the notification channel

Pick one or more channels configured under Settings > Notifications. Optionally attach a custom message template.
5

Save and enable

Click Save rule. The rule is active immediately.

​
What you’ll see

Active alerts appear on Monitoring > Alerts with severity badges. Click Acknowledge to claim ownership or Resolve to close. Each alert row expands to show the matched condition and the channels that were notified.

​
Alert states

StatusMeaning
openFired, no action yet
acknowledgedSomeone owns it
resolvedCondition cleared or manually closed
suppressedCollapsed inside the suppression window

​
Tips

  • Assign escalation policies to rules so overdue alerts automatically re-notify a secondary on-call.
  • Any Workflow step can raise an alert with a custom type, letting you create organization-specific triggers beyond the built-in set.
  • Deleting an alert is permanent and removes it from history. Use Resolve for real incidents so the audit trail is preserved.

Alert rules

Build condition trees with a visual editor and a live rule tester.

Notifications

Channels, templates, and escalation policies.

Audit logs

Every alert acknowledgement and resolution is captured.

Analytics

Alert trends and anomaly detections over time.