Incident Rate Limiting
Incident Response has the following Incident Rate Limits for trigger calls in place. This limit is calculated over 1-minute fixed time windows.
| Pricing Plans | Rate Limits (incidents/min) |
|---|---|
| Trial | 15 |
| Free | 15 |
| Pro | 300 |
| Premium | 500 |
| Enterprise | 1000 |
When Incident Rate limits are exceeded, our system throttles your alert requests for the reasons listed below:
-
To not overwhelm the system and provide a fair service for all the accounts on Incident Response in terms of resource consumption
-
To ensure that there is no violation of the platform
-
To not bombard the user with notifications for irrelevant or unnecessary incidents
-
To ensure that only meaningful and actionable alerts are sent into Incident Response
What kind of events do the Incident Rate Limits include?
Incident Rate Limits Calculation
Suppressed incidents and Duplicate events will be counted towards the Incident Rate Limits Calculation.
Auto-resolve events coming in via alert source integration webhooks will be counted towards rate limits. It has multiple layers to it, as listed below:
-
Resolve API (Webhook) Rate Limits: Rate limits for resolve requests now mirror the existing limits for trigger requests.
-
Batch Resolution Cap: A single resolve API (Webhook) request is now limited to a maximum of the latest 100 incidents.
-
Plan-Based Time Filters: A time-range filter tied to the organization's data retention plan. For example, if you are in the Pro plan, the data retention period of 3 months will be the boundary.
How can I ensure that I don’t exceed the Incident Rate Limits?
There are a few ways to control the kind of events that come into Incident Response. This is also done to ensure that you reduce alert fatigue and send in actionable events only.
-
Configure your third-party tools to send in only the alerts you will need to take action on instead of sending in every single alert. For example, you don’t need all of the warning alerts and will probably need just the ones that impact customer SLAs or your internal SLOs.
-
Use the Discard function to avoid hitting the Incident Rate Limits as Suppressed events that are discarded don't get counted against the allowed Incident Rate Limits.