Two concepts sit at the heart of what makes Pulse useful: suppression (cutting noise before it reaches you) and clustering (grouping what remains into single units of action).Documentation Index
Fetch the complete documentation index at: https://docs.cloudthinker.io/llms.txt
Use this file to discover all available pages before exploring further.
Suppression — Cutting the Noise
Every signal that arrives passes through seven layers before it reaches your feed. If any layer fires, the signal is stored but hidden. It won’t create noise, but it’s still there if you need to audit it.Duplicate
Duplicate
If an identical event already arrived within the last hour, the dedup count on the existing signal is incremented instead of creating a new row. You see one signal marked “×47” rather than 47 separate items. Typically the largest suppression category.
Rate Limited
Rate Limited
If a source emits more than 100 signals per minute, signals above that threshold are suppressed for the duration of the burst. Prevents a misconfigured alert from flooding your feed.
Snoozed
Snoozed
Signals matching an active snooze rule are suppressed. This is the only layer you control directly — see Snooze below.
Noise Signature
Noise Signature
Known-noisy AWS patterns are suppressed automatically — KMS grant lifecycle events, EBS volume churn, AutoScaling internal operations, Signin token redirects. These are AWS bookkeeping events that almost never indicate a real problem.
Flapping
Flapping
If a signal toggles state four or more times within 10 minutes, it is suppressed for 5 minutes. A resource oscillating between healthy and unhealthy collapses into a single notification once state stabilizes.
Cascade
Cascade
When a parent resource is suppressed, signals from its child resources are also suppressed for 30 minutes — so you don’t get child alerts for something that’s already known noise.
Severity Normalization
Severity Normalization
AWS automation services sometimes emit events with inflated severity. Pulse detects events from AWS internal actors and downgrades the severity before routing. The original severity is preserved for auditing.
Suppression breakdown over time — visible in the Analytics tab
To review suppressed signals, enable Show suppressed in the filter bar. They appear at reduced opacity with a label showing which layer caught them.Snooze
Snooze is the only suppression layer you control. Hover over any signal and click the snooze button. Choose a duration (1 minute to 30 days) and a scope:| Scope | What it silences |
|---|---|
| Signal | This exact signal only |
| Pattern | All signals with the same source, type, and title pattern |
| Resource | All signals from this resource ID |
Clusters — One Unit of Action
A cluster is the primary unit of work in Pulse. Instead of presenting every individual signal separately, Pulse groups related signals — the same EKS node pool firing nine alerts in 15 minutes becomes one cluster. You investigate once, act once, resolve once.Status Lifecycle
Every cluster moves through four statuses:| Status | Meaning |
|---|---|
| Forming | First signal arrived; collecting related signals |
| Active | Signals continuing to arrive; open and needs attention |
| Routed | Escalated — a linked Incident has been created |
| Resolved | Closed by a user or automatically |
The Cluster Detail Panel
Click any cluster to open the detail panel.
AI-generated description, signal timeline, resource details, and actions
The panel shows:- AI-generated description — plain-English summary of what happened and likely impact
- Cluster context — all member signals listed chronologically
- Correlation info — technique used (e.g.
time_window) and confidence score - Resource metadata — id, type, region, tags of the selected signal
- Tabs — Overview for signal detail, Routing for escalation history, Raw for the full event payload
Actions
Acknowledge
Mark as seen without closing. Signals the cluster is on your radar. Reversible.
Assign
Hand to a team member. They’re notified and their avatar appears in the feed.
Escalate
Create a linked Incident. Cluster moves to Routed and RCA begins automatically — the cluster summary and all member signals are passed to the RCA agent as starting context, so investigation begins with full signal history already loaded.
Resolve
Close the cluster when the issue is addressed and no Incident is needed.