Error Budget Burn-Rate Alert Design Prompt
Design multi-window, multi-burn-rate SLO alerts that page only when the error budget is actually in danger — fast pages for catastrophic burn, tickets for slow leaks — eliminating both flapping and silent budget exhaustion.
- Target user
- SREs implementing SLO-based alerting
- Difficulty
- Advanced
- Tools
- Claude, ChatGPT
The prompt
You are an SRE who has implemented Google-SRE-style multiwindow, multi-burn-rate alerting and tuned it until pages correlate with real budget risk. Help me design burn-rate alerts for an SLO. I will provide: - The SLO (target %, e.g. 99.9% availability) and the measurement window (e.g. 30 days) - The SLI definition (good events / valid events) and where it's measured - Current alerting (likely static thresholds that flap) - Traffic volume and variability Your job: 1. **Establish the budget math** — from the SLO and window, compute the total error budget and what a given burn rate means (a 14.4x burn over 1h consumes ~2% of a 30-day budget). Show the arithmetic so the thresholds aren't magic numbers. 2. **Pick burn-rate / window pairs** — propose the tiered set: fast-burn (e.g. 14.4x over 1h + 5m short window) → page; medium (6x over 6h) → page; slow (1x–3x over 1–3 days) → ticket. Explain the long+short window pairing that prevents both false alarms and slow recovery from resetting the alert. 3. **Map severity to response** — page only for fast/medium burn; route slow burn to a ticket/dashboard. State explicitly which tiers wake a human at 3am and which do not. 4. **Handle low-traffic and noisy SLIs** — for thin-traffic services, raw ratios swing wildly; recommend minimum-event guards or confidence handling so one bad minute doesn't page. 5. **Write the queries** — give PromQL (or equivalent) for each burn-rate alert with both windows, including the `for` durations. 6. **Validate against history** — replay the last 30 days: how many times would each tier have fired, and did those moments correspond to real incidents? Tune until page-worthy fires ≈ real incidents. Output: (a) the budget/burn-rate math worked out, (b) a tier table (burn rate, windows, severity, action), (c) ready-to-paste alert queries, (d) a backtest plan against historical data, (e) the error-budget-policy hook (what happens when budget is exhausted). Bias toward: paging only on genuine budget threat, multiwindow over single-window, and thresholds derived from math not vibes.
Run this prompt with AI
Test it, get an AI-improved version, or compare models — live in the Prompt Workspace. No copy-paste.
Related prompts
-
Error-Budget Policy Enforcement Review Prompt
Design and pressure-test an error-budget policy that actually changes behavior—defining what happens when the budget is exhausted, who decides, and how feature work yields to reliability work.
-
Post-Incident SLO and Error-Budget Recalibration Prompt
After a major incident, decide whether your SLO targets, error-budget windows, and burn-rate alerts still reflect reality — or whether the incident exposed targets that are wrong, dishonest, or unmeasurable.
-
Error Budget Policy and SLO Response Prompt
Design an error-budget policy and a tiered SLO-breach response after a service suffers repeated incidents — define burn-rate triggers, freeze rules, and the escalation path that converts budget burn into action.
-
Capacity Saturation Early-Warning Design Prompt
Design leading saturation alerts — for pools, queues, memory headroom, and resource trends — that fire while there is still time to act, so the team gets paged before a slow capacity creep becomes a 3am outage instead of after users already feel it.
More Incident Response prompts & error guides
Browse every Incident Response prompt and troubleshooting guide in one place.
Reading prompts? Get all 500 in one free PDF
500 battle-tested, copy-paste AI prompts engineered by a senior systems engineer — every one with fill-in placeholders and safety/back-out notes. Drop your email and it's yours.
- 500 prompts: Linux · Kubernetes · Terraform · OpenStack · GitLab · Docker · Monitoring · Incident Response
- Instant PDF download — yours free, forever
- Plus one practical AI-workflow email a week (no spam)
Single opt-in · unsubscribe anytime · no spam.