epok

User-Defined

Composite Rules

Updated May 31, 2026 · today

Multi-condition alert rules combining several signals. Use when no single threshold captures the failure mode.

Example alert

user-defined: (latency p99 > 2s AND error_rate spike) for 5 min on payment-service

Exact wording varies — the detector generates titles from the anomaly it finds. This is representative of what an alert looks like when it fires.

How it works

Combines multiple leaf conditions with AND/OR logic. Each leaf can reference a different detector, query, or threshold. The composite fires only when the full boolean expression is satisfied for the configured duration. Visual builder available in-app.

Availability

Runs on these tiers:

trialteamgrowthenterprise

Want to see this detector firing in the live demo?

Open alerts in the sandbox →

Related detectors

  • Threshold Rules

    Custom alert conditions on any query, with cooldown and duration guards. Use when you need a hand-tuned alert beside automatic detection.

← All detectors