Alerts

An alert watches a measure and fires when a condition is met. Use alerts for "revenue dropped 10 % day-over-day", "error rate > 1 %", or "inventory < reorder point".

Create an alert

From a visual, click ...Alert me when…. The builder prefills the measure and grain from the visual context:

When      daily_revenue
drops     by more than 10 %
compared  to the previous day
notify    #finance-alerts (Slack) and ada@example.com
between   09:00 and 18:00 IST on weekdays

Alerts are saved to the workspace and appear in Alerts. They can be paused, cloned, or edited.

Conditions

  • Threshold: value > / < / = / between
  • Change: up / down by absolute or percentage amount, relative to previous period
  • Anomaly: outside 2σ / 3σ band using our anomaly detector
  • Custom: a boolean expression in the measure DSL

Channels

  • In-app — red badge on the top bar, full detail in the Alerts panel
  • Email — HTML + plain-text fallback; uses the email delivery service
  • Slack — Block Kit cards with KPI grid, up/down arrow, and quick-actions
  • Webhook — HMAC-signed POST to your endpoint; see Webhooks
  • SMS — on Growth and above, for critical alerts

Per-channel retry and de-duplication policies — an alert that fires three times in a minute emits one notification, not three.

Preview

Click Preview in the builder and OneAnalytics runs the rule against the last 30 days of data, showing you every point in time it would have fired. Great for tuning sensitivity.

Snooze

Right-click any fired alert → Snooze for 1 h / 1 d / until resolved. Suppresses future fires of the same alert without disabling it.

Alert history

Every fire is persisted with: the triggering value, the threshold, the timestamp, and the delivered payload. Exportable as CSV for compliance.

Shared alerts

Alerts belong to a workspace; editors can edit, viewers can subscribe (get notified) but not modify. Sharing an alert to a public or exec-role audience uses the standard sharing grant machinery.

Silencing during maintenance

Disable the alert, or use the Maintenance window toggle on the workspace — suspends all alerts for the specified hours.