Auto pause incident notification

1 . A method for pausing alert notifications, comprising:

continuously monitoring resolution data for alerts in an information technology environment;

maintaining a rolling table data structure that automatically updates as alerts resolve to track transient patterns;

determining that an alert is likely transient responsive to identifying, based on data in the rolling table data structure, that 1) a first number of most recently resolved alerts that are similar to the alert is greater than a predetermined minimum number and 2) at least a predetermined second number of the most recently resolved alerts that are similar to the alert were transient;

in response to determining that the alert is likely transient, automatically withholding transmission of a notification associated with the alert during a pause period while maintaining the alert in system memory;

determining whether the alert is unresolved after a lapse of the pause period; and

in response to determining that the alert is unresolved after the lapse of the pause period, automatically triggering notification transmission to a responder of the alert.

2 . The method of claim 1 , further comprising:

triggering the alert responsive to an event in a managed environment.

3 . The method of claim 1 , wherein determining that the alert is likely transient comprises:

determining that the alert is likely transient based on a comparison of a normalized title of the alert to respective normalized titles of the most recently resolved alerts.

4 . The method of claim 1 , wherein the predetermined minimum number is greater than the predetermined second number.

5 . The method of claim 3 , further comprising:

obtaining the normalized title from a title of the alert by:

replacing an identifier in the title with a representative token.

6 . The method of claim 5 , wherein obtaining the normalized title from the title of the alert further comprises:

replacing a number of a numeric string of the title with a first predefined character.

7 . The method of claim 5 , wherein obtaining the normalized title from the title of the alert further comprises applying at least one of:

removing newlines from the title;

removing tab characters from the title;

converting the title to a single case; or

replacing at least some punctuation characters with a second predefined character.

8 . The method of claim 5 , wherein the rolling table data structure comprises a machine learning model that takes as input a vectorized normalized title derived from the normalized title.

9 . A system for pausing alert notifications, comprising:

a memory; and

a processor, the processor configured to execute instructions stored in the memory to:

continuously monitor resolution data for alerts in an information technology environment;

maintain a rolling table data structure that automatically updates as alerts resolve to track transient patterns;

determine that an alert is likely transient responsive to a determination, based on data in the rolling table data structure, that 1) a first number of most recently resolved alerts that are similar to the alert is greater than a predetermined minimum number and 2) at least a predetermined second number of the most recently resolved alerts that are similar to the alert were transient;

in response to determining that the alert is likely transient, automatically withhold transmission of a notification associated with the alert during a pause period while maintaining the alert in system memory; and

in response to determining that the alert is unresolved after a lapse of the pause period, automatically triggering notification transmission to a responder of the alert.

10 . The system of claim 9 , wherein the alert is triggered responsive to a condition occurring in an information technology environment.

11 . The system of claim 9 , wherein the alert is determined to be likely transient based on a comparison of a normalized title of the alert to respective normalized titles of the most recently resolved alerts.

12 . The system of claim 9 , wherein the predetermined minimum number is greater than the predetermined second number.

13 . The system of claim 11 , wherein the processor is further configured to execute instructions stored in the memory to:

obtain the normalized title from a title of the alert by instructions to:

replace a number of a numeric string of the title with a first predefined character.

14 . The system of claim 13 , wherein to obtain the normalized title from the title of the alert further comprises to:

replace an identifier in the title with a representative token.

15 . The system of claim 13 , wherein to obtain the normalized title from the title of the alert further comprises to apply at least one of:

remove newlines from the title;

remove tab characters from the title;

convert the title to a single case; or

replace at least some punctuation characters with a second predefined character.

16 . The system of claim 13 , wherein the rolling table data structure comprises a machine learning model that takes as input a vectorized normalized title derived from the normalized title.

17 . A non-transitory computer readable medium storing instructions operable to cause a processor to perform operations comprising:

continuously monitoring resolution data for alerts in an information technology environment;

maintaining a rolling table data structure that automatically updates as alerts resolve to track transient patterns;

predicting that a condition is likely to resolve during a pause period based on data in a rolling table data structure indicating that 1) a first number of most recently resolved conditions that are similar to the condition is greater than a predetermined minimum number and 2) at least a predetermined second number of the most recently resolved conditions that are similar to the condition were transient;

in response to predicting that the condition will resolve during the pause period, automatically pausing performing an action associated with the condition for the pause period; and

in response to determining that the condition did not resolve in the pause period, automatically performing the action.

18 . The non-transitory computer readable medium of claim 17 , wherein the operations further comprise:

responsive to a status change with respect to the condition, updating the rolling table data structure.

19 . The non-transitory computer readable medium of claim 17 , wherein the condition is associated with a monitored information technology environment.

20 . The non-transitory computer readable medium of claim 17 , wherein the predetermined minimum number is greater than the predetermined second number.