Alert Rules Reference
Guardrly evaluates 8 alert rules for every operation logged.
Rule Reference
1. Rate Limit (Level 2)
Triggers when more than 50 requests are made in a 5-minute window.
- Threshold: 50 requests / 5 minutes (configurable)
- Notification: Telegram
2. High Frequency Write (Level 2)
Triggers when 10 or more consecutive write operations (POST, PUT, DELETE, PATCH) are made without any GET request.
- Threshold: 10 consecutive writes (configurable)
- Notification: Telegram
3. Consecutive Delete (Level 3 — Fixed)
Triggers when 3 or more DELETE operations are made in a row.
- Threshold: 3 consecutive DELETEs (not configurable)
- Notification: Telegram + Email
4. Platform Forbidden (Level 3 — Fixed)
Triggers when 3 consecutive requests return 403 Forbidden.
- Threshold: 3 consecutive 403s (not configurable)
- Notification: Telegram + Email
5. Rate Limited by Platform (Level 3 — Fixed)
Triggers when 2 consecutive requests return 429 Too Many Requests.
- Threshold: 2 consecutive 429s (not configurable)
- Notification: Telegram + Email
6. Server Errors (Level 2)
Triggers when 3 consecutive requests return 5xx errors.
- Threshold: 3 consecutive 5xx (configurable)
- Notification: Telegram
7. Large Write (Level 1 — Dashboard Only)
Triggers when a POST/PUT/PATCH payload exceeds 10KB. No push notification.
8. Off-Hours Operation (Level 1 — Dashboard Only)
Triggers when DELETE or POST operations occur between 00:00 and 06:00 UTC. No push notification.
Alert Levels
| Level | Name | Channels |
|---|---|---|
| 1 | Info | Dashboard only |
| 2 | Warning | Telegram |
| 3 | Critical | Telegram + Email |
Deduplication
The same alert rule will not fire more than once every 10 minutes for the same user. This prevents alert spam.
Storm Protection
If more than 100 alerts fire within 1 minute, Guardrly enters silent mode for 15 minutes and sends a single summary alert.
Configuring Alert Rules
Go to app.guardrly.com/settings to:
- Enable or disable Level 1–2 rules
- Adjust thresholds for configurable rules
- Level 3 rules are fixed and cannot be disabled