Alert → Incident Grouping

FixFast groups alerts into incidents using deterministic rules:

• Fingerprints: Primary key for grouping similar alerts.
• Time windows: Align alerts within a defined window to avoid flapping.
• Service & environment context: Prevents unrelated services or regions from merging.

How grouping decides

• If fingerprint, service, and environment align inside the window, alerts join the same incident.
• Out-of-window or mismatched context stays separate to avoid false merges.

Tips

• Keep fingerprints stable per alert type.
• Tune time windows per source if flapping occurs.
• Ensure environment labels are present for every alert.