The Multi-Window Multi-Burn-Rate Alert

The Google SRE pattern: alert on burn rate over multiple windows simultaneously. Why it works, with the configuration.

The idea

Three burn-rate alerts at different windows. Each fires when burn over its window exceeds a threshold.

Faster windows catch acute spikes; slower windows catch sustained drift.

Standard config

1-hour window, alert at 14.4x burn rate. 6-hour window, 6x. 3-day window, 1x.

All three need to fire simultaneously for the high-priority alert. Single window can fire low-priority.

Why this works

Reduces noise: fast spikes that resolve quickly do not fire; sustained issues do.

Reduces blind spots: slow drifts catch up before exhausting the budget.