Agent Wranglers

Alerts and on-call Required

Prove that alerts still reach you

Keep one alert that always fires and goes to an outside service, which pages when it stops arriving. Send a test page every month.

How to do it

A stopped alert manager, an expired paging key or a broken mail relay fails silently, and then every other alert is silent too. Prometheus setups call this always-firing alert Watchdog. Route it to a heartbeat monitor outside your own systems that expects it every few minutes. Once a month, send a test page and confirm the on-call phone rings.

Example

# Prometheus rule: always firing
- alert: Watchdog
  expr: vector(1)
  labels:
    severity: heartbeat

# Alertmanager: repeat it to the outside monitor every minute
route:
  routes:
    - matchers: ['severity="heartbeat"']
      receiver: outside-heartbeat
      group_wait: 0s
      group_interval: 1m
      repeat_interval: 1m
receivers:
  - name: outside-heartbeat
    webhook_configs:
      - url: https://heartbeat.example.com/ping/alerting

How to check

Stop the alert manager on staging. The outside monitor pages within 15 minutes. The paging tool shows a test page from the last 31 days.

For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers operations playbook: https://agentwranglers.se/playbook/operations/alerts-and-on-call/alert-pipeline-heartbeat.