Skip to content

Commit 5e895c4

Browse files
authored
Update Discord experimental alerts
1 parent de28481 commit 5e895c4

1 file changed

Lines changed: 52 additions & 7 deletions

File tree

  • kubernetes/namespaces/monitoring/alerts/alerts.d

kubernetes/namespaces/monitoring/alerts/alerts.d/discord.yaml

Lines changed: 52 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -12,15 +12,60 @@ groups:
1212
summary: "High rate of guild member joins"
1313
description: "User join rate is {{ $value }} per hour, which may indicate a raid or other unusual activity."
1414

15-
# Experimental alert that checks for 500% growth based on previous period instead of static rate measurement
16-
# Hopefully, this is more adaptable as server growth rates vary.
17-
- alert: discord/experimental-members-growth
15+
- alert: discord/experimental/membership-spike
1816
expr: |
19-
delta(bot_guild_total_members[30m]) > 5 * delta(bot_guild_total_members[30m] offset 30m)
20-
and delta(bot_guild_total_members[30m] offset 30m) > 0
17+
(
18+
bot_guild_total_members - bot_guild_total_members offset 5m
19+
) > 50
20+
for: 1m
21+
labels:
22+
severity: page
23+
annotations:
24+
summary: "Sudden member spike detected"
25+
description: >
26+
Guild membership grew by more than 50 members in the last 5 minutes
27+
(current: {{ $value }} new members). Possible bot raid.
28+
29+
- alert: discord/experimental/abnormal-join-rate
30+
expr: |
31+
(
32+
deriv(bot_guild_total_members[15m]) * 60
33+
) > 10
34+
for: 10m
35+
labels:
36+
severity: page
37+
annotations:
38+
summary: "Abnormal sustained join rate"
39+
description: >
40+
Guild is gaining more than 10 members per minute, sustained for over
41+
10 minutes (rate: {{ $value | humanize }} members/min).
42+
43+
- alert: discord/experimental/mass-user-drop
44+
expr: |
45+
(
46+
bot_guild_total_members offset 5m - bot_guild_total_members
47+
) > 30
48+
for: 1m
49+
labels:
50+
severity: page
51+
annotations:
52+
summary: "Sudden member drop detected"
53+
description: >
54+
Guild membership dropped by more than 30 members in the last 5 minutes
55+
(lost: {{ $value }} members).
56+
57+
- alert: discord/experimental/user-churn
58+
expr: |
59+
(
60+
increase(bot_guild_total_members[10m]) +
61+
decrease(bot_guild_total_members[10m])
62+
) > 40
2163
for: 5m
2264
labels:
2365
severity: page
2466
annotations:
25-
summary: "Experimental: Unusual growth in guild members"
26-
description: "Guild member count has increased by more than 500% compared to the previous 30-minute period, which may indicate a raid or other unusual activity."
67+
summary: "High member churn detected"
68+
description: >
69+
Combined join and leave activity exceeded 40 events in 10 minutes
70+
(churn score: {{ $value }}). Possible raid probing, selfbots, or
71+
coordinated join/leave cycles.

0 commit comments

Comments
 (0)