TICKET MANAGEMENT

Collapse PagerDuty alert storms into one parent incident

On a new PagerDuty incident, clusters it with recent incidents sharing the same root signal and, when it belongs to an active storm, links it under a parent and suppresses…

CategoryTicket Management
Enginesim
Difficultyadvanced
Triggerevent
Steps6
Setup~25 min

How it runs

The automated pipeline, trigger to output.

  • TriggerNew PagerDuty incident openedPagerDutyPagerDuty
  • ActionNormalize payload into error signatureOpenAI
  • ActionLook up active incidents in time windowPostgreSQLPostgres
  • LogicNew storm or member of existing storm?
  • ActionLink under parent + suppress pagingPagerDutyPagerDuty
  • OutputUpdate storm count in Slack channelSlack

What it does

When PagerDuty opens a new incident, the workflow checks whether it is part of an ongoing alert storm by comparing service, error signature, and timing against active incidents. Members of the same storm are linked under a single parent incident, and redundant pages are suppressed so the on-call sees one alert, not fifty.

When to use it

Use it during cascading failures where one root cause fires dozens of monitors. It cuts pager noise and gives responders a single thread to work.

How it works

  1. 1A new PagerDuty incident triggers the flow.
  2. 2OpenAI normalizes the alert payload into a stable error signature.
  3. 3Postgres looks up active incidents with matching signatures inside a time window.
  4. 4A logic step decides whether this is a new storm or a member of an existing one.
  5. 5If it joins a storm, PagerDuty links it under the parent and snoozes its notification.
  6. 6Slack updates the incident channel with the running duplicate count.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect PagerDutyIncidents, on-call, escalations.
  2. 2
    Connect OpenAIModels, embeddings, files.
  3. 3
    Connect PostgresAny Postgres URL — query, write, migrate.
  4. 4
    Connect SlackChannels, DMs, threads, mentions.
  5. 5
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  6. 6
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  7. 7
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.