問題文
A team wants a detector that neither flaps nor misses a genuine sustained problem, on a signal that occasionally has a missing data point. Which combination of settings does that?
選択肢
- Use a plain duration so that every point has to meet the threshold, and set the clear threshold equal to the trigger threshold so that the alert clears as soon as the situation has recovered.
- Use the immediate form and rely on the auto-clear feature to resolve the flapping, because auto-clear removes alerts that are triggered and cleared repeatedly within a short window of time.
- Apply a long moving average so that the missing points are averaged away, leaving a smooth signal for the condition to evaluate over the whole duration of the rule.
- Use a percentage of a duration rather than a plain duration so that occasional missing points are tolerated, and separate the trigger and clear thresholds so a signal hovering near the boundary does not repeatedly trigger and clear.