Metrics, Monitoring & Alerting
Metric Types
Summary
A metric uses the type matching its semantics, and that type remains stable once consumers depend on it.
Standards
std-ops-metric-types-01A metric MUST be recorded using the metric type that matches its semantics, such as a monotonically increasing count as a counter, a point-in-time value as a gauge, or a distribution of values as a histogram.std-ops-metric-types-02A value that can both increase and decrease, such as a queue depth or the number of claims currently awaiting assessment, MUST use a non-monotonic metric type.std-ops-metric-types-03A value whose distribution matters, such as request latency or the time taken to reach a claim determination, MUST use a metric type that preserves that distribution.std-ops-metric-types-04The metric type recorded for an existing metric MUST NOT be changed once a dashboard, an alert, or another consumer depends on it, without a coordinated migration.
Implements These Principles
Metric Cardinality
Summary
A metric uses bounded, low-cardinality labels, with diagnostic high-cardinality values captured in traces or logs.
Standards
std-ops-metric-cardinality-01A metric label or dimension MUST NOT carry an unbounded or high-cardinality value, such as a raw identifier or a timestamp, since this increases storage cost and degrades query performance.std-ops-metric-cardinality-02A high-cardinality value needed for diagnosis SHOULD be captured in a trace or log.
Related Standards
Implements These Principles
Dashboards
Summary
A service's key operational and business indicators are available through a current dashboard accessible to its own team.
Standards
std-ops-dashboards-01A production service SHOULD have a dashboard presenting its key operational indicators, such as request rate, error rate, latency, saturation, or equivalent indicators.std-ops-dashboards-02For a service that performs a business function, a dashboard SHOULD present one or more business-relevant indicators alongside its operational indicators, such as the time taken to reach a claim determination.std-ops-dashboards-03A dashboard SHOULD be accessible to the team responsible for operating the service it covers without assistance from a separate team.std-ops-dashboards-04A dashboard SHOULD be updated as the service evolves so its indicators continue to reflect actual behaviour.
Implements These Principles
Alerting
Summary
An alert automatically reaches its responsible team with impact-proportionate severity, an SLO-based threshold where available, and a runbook; alerts and supporting dashboards are tested and validated in advance.
Standards
std-ops-alerting-01An alert MUST be assigned to a team responsible for responding to it.std-ops-alerting-02An alert MUST automatically notify its responsible team once triggered.std-ops-alerting-03An alert's severity MUST be proportionate to the operational or business impact of the condition it signals, distinguishing a condition requiring an immediate response from one that is informational only.std-ops-alerting-04An alert's threshold SHOULD be defined against a service level objective where one exists.std-ops-alerting-05An alert SHOULD reference a runbook that a person or an AI tool, whether a directed assistant or an autonomous AI agent, can follow.std-ops-alerting-06An alert or dashboard relied on for incident response MUST be validated before responders depend on it.std-ops-alerting-07A paging alert SHOULD be exercised in non-paging mode under representative production conditions before it pages responders.std-ops-alerting-08A dashboard SHOULD be validated against its underlying telemetry.
Related Standards
Implements These Principles
Alert Fatigue
Summary
An alert that repeatedly receives no genuine response is tuned or retired, and alert volume is reviewed periodically to preserve actionability.
Standards
std-ops-alert-fatigue-01An alert that fires repeatedly without a corresponding response, or that is routinely acknowledged without action, MUST be reviewed and either tuned to reflect a genuine condition or retired.std-ops-alert-fatigue-02Alert volume SHOULD be reviewed periodically across a service, so a recipient's ability to distinguish an actionable alert from routine noise is not eroded over time.