Reading the alert quality scorecard

Track false-positive rate, MTTA, and suppression stats to prove your alerting is trustworthy.

Quick answer

The scorecard shows four numbers per site: alerts fired, alerts suppressed, false-positive rate, and mean time to acknowledge (MTTA). Aim for false-positive rate under 10%.

What it shows

Where to find it in Lemwatch

Insights → Alert quality scorecard (top-right of the Insights page).

How to act on it

  1. Open Insights → Alert quality scorecard.
  2. Sort sites by false-positive rate, descending.
  3. For sites over 15%, review the suppressed inbox to find patterns.
  4. Apply the recommended fix (confirmation gate, flap tuning, hysteresis).
  5. Re-check the scorecard next week to confirm the rate dropped.

FAQ

How is "false positive" defined?

An alert manually dismissed as "not a real incident" within 30 minutes of firing.

Can I export the scorecard?

Yes — CSV export lives on the same page.

Related