I am trying to tune integration with our monitoring service (ElastAlert) using Events v2 API.
I have set up a rule to send ‘trigger’ alerts when some log message are discovered.
Also I would like consecutive alerts to be grouped into one incident based on some fields of the log messages, and set up a dedup_key as a combination of these fields.
But to my surprise alert fired with the same value of dedup_key are not grouped into one incident.
For example for https://intento.pagerduty.com/alerts/PSIZ3NN and https://intento.pagerduty.com/alerts/PRH9U3A, I had specified the same value ‘Kong Error: POST /ai/text/translate - 400, for client clientX_integration’, but there were two distinct incidents created for each of them (26 and 27).
Can you please clarify - is it possible to create alerts in the existing incident?