[{"data":1,"prerenderedAt":605},["ShallowReactive",2],{"navigation_docs_zh":3,"docs_zh_-zh-docs-features-alert-triage":280,"docs_zh_-zh-docs-features-alert-triage_surround":600},[4,18,51,254,267],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":6},"入门",false,"/zh/docs/getting-started","zh/docs/1.getting-started",[10,14],{"title":11,"path":12,"stem":13},"简介","/zh/docs/getting-started/introduction","zh/docs/1.getting-started/1.introduction",{"title":15,"path":16,"stem":17},"快速开始","/zh/docs/getting-started/quick-start","zh/docs/1.getting-started/2.quick-start",{"title":19,"icon":6,"path":20,"stem":21,"children":22,"page":6},"功能","/zh/docs/features","zh/docs/2.features",[23,27,31,35,39,43,47],{"title":24,"path":25,"stem":26},"告警分诊","/zh/docs/features/alert-triage","zh/docs/2.features/2.alert-triage",{"title":28,"path":29,"stem":30},"事故调查","/zh/docs/features/incident-investigation","zh/docs/2.features/3.incident-investigation",{"title":32,"path":33,"stem":34},"部署验证","/zh/docs/features/deployment-verification","zh/docs/2.features/4.deployment-verification",{"title":36,"path":37,"stem":38},"数据探索","/zh/docs/features/data-exploration","zh/docs/2.features/5.data-exploration",{"title":40,"path":41,"stem":42},"知识库","/zh/docs/features/knowledges","zh/docs/2.features/6.knowledges",{"title":44,"path":45,"stem":46},"Castrel Proxy","/zh/docs/features/castrel-proxy","zh/docs/2.features/7.castrel-proxy",{"title":48,"path":49,"stem":50},"自动化","/zh/docs/features/automations","zh/docs/2.features/8.automations",{"title":52,"icon":6,"path":53,"stem":54,"children":55},"集成","/zh/docs/integrations","zh/docs/3.integrations/index",[56,57,62,67,72,77,81,85,89,94,99,104,109,113,117,122,127,131,136,141,146,151,156,160,165,170,174,178,183,188,193,198,203,208,212,216,220,224,229,234,239,244,249],{"title":52,"path":53,"stem":54},{"title":58,"path":59,"stem":60,"icon":61},"Prometheus","/zh/docs/integrations/prometheus","zh/docs/3.integrations/1.prometheus","i-simple-icons-prometheus",{"title":63,"path":64,"stem":65,"icon":66},"AWS","/zh/docs/integrations/aws","zh/docs/3.integrations/10.aws","i-simple-icons-amazonwebservices",{"title":68,"path":69,"stem":70,"icon":71},"阿里云（Aliyun）","/zh/docs/integrations/aliyun","zh/docs/3.integrations/12.aliyun","i-simple-icons-alibabacloud",{"title":73,"path":74,"stem":75,"icon":76},"腾讯云（Tencent Cloud）","/zh/docs/integrations/tencent-cloud","zh/docs/3.integrations/13.tencent-cloud","i-lucide-plug",{"title":78,"path":79,"stem":80,"icon":76},"华为云（Huawei Cloud）","/zh/docs/integrations/huaweicloud","zh/docs/3.integrations/14.huaweicloud",{"title":82,"path":83,"stem":84,"icon":76},"火山引擎（Volcengine）","/zh/docs/integrations/volcengine","zh/docs/3.integrations/15.volcengine",{"title":86,"path":87,"stem":88,"icon":76},"轻帆云（QingFanYun）","/zh/docs/integrations/qingfanyun","zh/docs/3.integrations/16.qingfanyun",{"title":90,"path":91,"stem":92,"icon":93},"Grafana","/zh/docs/integrations/grafana","zh/docs/3.integrations/17.grafana","i-simple-icons-grafana",{"title":95,"path":96,"stem":97,"icon":98},"VictoriaMetrics","/zh/docs/integrations/victoriametrics","zh/docs/3.integrations/18.victoriametrics","i-simple-icons-victoriametrics",{"title":100,"path":101,"stem":102,"icon":103},"New Relic","/zh/docs/integrations/new-relic","zh/docs/3.integrations/19.new-relic","i-simple-icons-newrelic",{"title":105,"path":106,"stem":107,"icon":108},"Elasticsearch","/zh/docs/integrations/elasticsearch","zh/docs/3.integrations/2.elasticsearch","i-simple-icons-elasticsearch",{"title":110,"path":111,"stem":112,"icon":76},"Zabbix","/zh/docs/integrations/zabbix","zh/docs/3.integrations/20.zabbix",{"title":114,"path":115,"stem":116,"icon":76},"监控宝（JianKongBao）","/zh/docs/integrations/jiankongbao","zh/docs/3.integrations/21.jiankongbao",{"title":118,"path":119,"stem":120,"icon":121},"PagerDuty","/zh/docs/integrations/pagerduty","zh/docs/3.integrations/22.pagerduty","i-simple-icons-pagerduty",{"title":123,"path":124,"stem":125,"icon":126},"Sentry","/zh/docs/integrations/sentry","zh/docs/3.integrations/23.sentry","i-simple-icons-sentry",{"title":128,"path":129,"stem":130,"icon":76},"Freshworks / Freshservice","/zh/docs/integrations/freshworks","zh/docs/3.integrations/24.freshworks",{"title":132,"path":133,"stem":134,"icon":135},"Linear","/zh/docs/integrations/linear","zh/docs/3.integrations/25.linear","i-simple-icons-linear",{"title":137,"path":138,"stem":139,"icon":140},"ClickHouse","/zh/docs/integrations/clickhouse","zh/docs/3.integrations/26.clickhouse","i-simple-icons-clickhouse",{"title":142,"path":143,"stem":144,"icon":145},"Kubernetes","/zh/docs/integrations/kubernetes","zh/docs/3.integrations/27.kubernetes","i-simple-icons-kubernetes",{"title":147,"path":148,"stem":149,"icon":150},"Terraform Cloud / HCP Terraform","/zh/docs/integrations/terraform","zh/docs/3.integrations/28.terraform","i-simple-icons-terraform",{"title":152,"path":153,"stem":154,"icon":155},"Jenkins","/zh/docs/integrations/jenkins","zh/docs/3.integrations/29.jenkins","i-simple-icons-jenkins",{"title":157,"path":158,"stem":159,"icon":93},"Grafana Loki","/zh/docs/integrations/grafana-loki","zh/docs/3.integrations/3.grafana-loki",{"title":161,"path":162,"stem":163,"icon":164},"Ansible / AWX","/zh/docs/integrations/ansible","zh/docs/3.integrations/30.ansible","i-simple-icons-ansible",{"title":166,"path":167,"stem":168,"icon":169},"GitLab","/zh/docs/integrations/gitlab","zh/docs/3.integrations/31.gitlab","i-simple-icons-gitlab",{"title":171,"path":172,"stem":173,"icon":76},"钉钉（DingTalk）","/zh/docs/integrations/dingtalk","zh/docs/3.integrations/32.dingtalk",{"title":175,"path":176,"stem":177,"icon":76},"飞书（Feishu / Lark）","/zh/docs/integrations/feishu","zh/docs/3.integrations/33.feishu",{"title":179,"path":180,"stem":181,"icon":182},"Telegram","/zh/docs/integrations/telegram","zh/docs/3.integrations/34.telegram","i-simple-icons-telegram",{"title":184,"path":185,"stem":186,"icon":187},"Email","/zh/docs/integrations/email","zh/docs/3.integrations/35.email","i-simple-icons-gmail",{"title":189,"path":190,"stem":191,"icon":192},"微信企业机器人（Weixin Clawbot）","/zh/docs/integrations/weixin-clawbot","zh/docs/3.integrations/36.weixin-clawbot","i-simple-icons-wechat",{"title":194,"path":195,"stem":196,"icon":197},"Notion","/zh/docs/integrations/notion","zh/docs/3.integrations/37.notion","i-simple-icons-notion",{"title":199,"path":200,"stem":201,"icon":202},"Confluence","/zh/docs/integrations/confluence","zh/docs/3.integrations/38.confluence","i-simple-icons-confluence",{"title":204,"path":205,"stem":206,"icon":207},"Google Docs","/zh/docs/integrations/google-docs","zh/docs/3.integrations/39.google-docs","i-simple-icons-googledocs",{"title":209,"path":210,"stem":211,"icon":93},"Grafana Tempo","/zh/docs/integrations/grafana-tempo","zh/docs/3.integrations/4.grafana-tempo",{"title":213,"path":214,"stem":215,"icon":76},"钉钉文档（DingTalk Docs）","/zh/docs/integrations/dingtalk-docs","zh/docs/3.integrations/40.dingtalk-docs",{"title":217,"path":218,"stem":219,"icon":76},"LDAP","/zh/docs/integrations/ldap","zh/docs/3.integrations/41.ldap",{"title":221,"path":222,"stem":223,"icon":76},"Dify","/zh/docs/integrations/dify","zh/docs/3.integrations/42.dify",{"title":225,"path":226,"stem":227,"icon":228},"自定义 MCP（Custom MCP）","/zh/docs/integrations/custom-mcp","zh/docs/3.integrations/43.custom-mcp","i-simple-icons-anthropic",{"title":230,"path":231,"stem":232,"icon":233},"GitHub","/zh/docs/integrations/github","zh/docs/3.integrations/5.github","i-simple-icons-github",{"title":235,"path":236,"stem":237,"icon":238},"Slack","/zh/docs/integrations/slack","zh/docs/3.integrations/6.slack","i-simple-icons-slack",{"title":240,"path":241,"stem":242,"icon":243},"Vercel","/zh/docs/integrations/vercel","zh/docs/3.integrations/7.vercel","i-simple-icons-vercel",{"title":245,"path":246,"stem":247,"icon":248},"Graylog","/zh/docs/integrations/graylog","zh/docs/3.integrations/8.graylog","i-simple-icons-graylog",{"title":250,"path":251,"stem":252,"icon":253},"Datadog","/zh/docs/integrations/datadog","zh/docs/3.integrations/9.datadog","i-simple-icons-datadog",{"title":255,"path":256,"stem":257,"children":258,"page":6},"更多","/zh/docs/more","zh/docs/4.more",[259,263],{"title":260,"path":261,"stem":262},"路线图","/zh/docs/more/roadmap","zh/docs/4.more/1.roadmap",{"title":264,"path":265,"stem":266},"支持","/zh/docs/more/support","zh/docs/4.more/2.support",{"title":268,"path":269,"stem":270,"children":271,"page":6},"安全","/zh/docs/security","zh/docs/5.security",[272,276],{"title":273,"path":274,"stem":275},"隐私政策","/zh/docs/security/privacy-policy","zh/docs/5.security/1.privacy-policy",{"title":277,"path":278,"stem":279},"服务条款","/zh/docs/security/terms-of-service","zh/docs/5.security/2.terms-of-service",{"id":281,"title":24,"body":282,"description":593,"extension":594,"links":595,"meta":596,"navigation":597,"path":25,"seo":598,"stem":26,"__hash__":599},"docs_zh/zh/docs/2.features/2.alert-triage.md",{"type":283,"value":284,"toc":584},"minimark",[285,289,294,297,300,323,326,331,334,352,357,360,391,396,406,417,421,424,429,432,441,446,453,458,461,477,480,533,536,555,559,567],[286,287,288],"p",{},"告警分诊是 Castrel 的核心能力之一，它改变了 SRE 团队处理告警的方式，减少告警疲劳，并让你能在现有工作流中直接基于数据做决策。",[290,291,293],"h2",{"id":292},"什么是告警分诊","什么是告警分诊？",[286,295,296],{},"告警分诊是一套由 AI 驱动的告警分类与分析系统。它会自动评估来自监控工具（Prometheus、Grafana 等）的告警，并直接在 Slack 中给出智能分析结果。你不必再手动登录多个系统逐条排查告警，Castrel 会像你的智能“副驾”一样，在几秒钟内给出带上下文的分析。",[286,298,299],{},"告警分诊会自动把告警归为三类：",[301,302,303,311,317],"ul",{},[304,305,306,310],"li",{},[307,308,309],"strong",{},"噪音（误报）","：符合预期的系统行为，不需要处理",[304,312,313,316],{},[307,314,315],{},"潜在风险（Warning）","：值得关注，但不算紧急",[304,318,319,322],{},[307,320,321],{},"事故（Incident）","：已经确认有用户影响，需要立即处理",[290,324,325],{"id":325},"如何使用告警分诊",[286,327,328],{},[307,329,330],{},"1. 触发告警分诊",[286,332,333],{},"告警分诊可以通过两种方式触发：",[301,335,336,346],{},[304,337,338,341,342,345],{},[307,339,340],{},"Webhook 集成","：当告警发送到已连接的 IM 工具时自动触发。目前支持 Slack，后续会支持更多集成（见 ",[343,344,260],"a",{"href":261},"）。",[304,347,348,351],{},[307,349,350],{},"手动触发","：在 Castrel 界面或集成入口中，手动对任意告警发起分析。",[286,353,354],{},[307,355,356],{},"2. 接收报告",[286,358,359],{},"当告警触发后，Castrel 会自动分析并返回一份由三部分组成的报告：",[301,361,362,368,385],{},[304,363,364,367],{},[307,365,366],{},"分类结果","：它是噪音、潜在风险还是事故，并附带置信度分数",[304,369,370,373,374],{},[307,371,372],{},"告警自分析","：基于监控规则和历史数据评估告警特征，包括：\n",[301,375,376,379,382],{},[304,377,378],{},"这个告警是否经常触发",[304,380,381],{},"它是否通常会自动恢复",[304,383,384],{},"历史触发模式和恢复耗时",[304,386,387,390],{},[307,388,389],{},"证据摘要","：支持分类结论的关键数据点和观察结果",[286,392,393],{},[307,394,395],{},"3. 后续动作",[286,397,398,399,402,403,405],{},"根据分类结果采取合适动作。如果告警被确认为 ",[307,400,401],{},"事故","，你可以让 Castrel 发起 ",[343,404,28],{"href":29}," 来进一步做根因分析。",[286,407,408,409,412,413,416],{},"你也可以提供反馈（",[307,410,411],{},"Helpful"," / ",[307,414,415],{},"Not Helpful","），帮助 Castrel 持续提高分析准确度。",[290,418,420],{"id":419},"castrel-如何进行告警分诊","Castrel 如何进行告警分诊",[286,422,423],{},"Castrel 会按照一套系统化流程分析每条告警：",[286,425,426],{},[307,427,428],{},"1. 告警规则与历史分析",[286,430,431],{},"Castrel 首先会获取监控规则配置和历史告警数据，以判断：",[301,433,434,436,438],{},[304,435,378],{},[304,437,381],{},[304,439,440],{},"历史模式和恢复时间",[286,442,443],{},[307,444,445],{},"2. 告警对象识别与可观测性检查",[286,447,448,449,452],{},"Castrel 会从告警消息和字段中提取告警对象（服务或基础设施），然后在相关集成已连接的前提下检查对应的可观测性数据。你也可以创建带有告警触发模式的 ",[343,450,451],{"href":41},"知识","，告诉 Castrel 应该如何调查特定类型的告警。",[286,454,455],{},[307,456,457],{},"3. 异常与影响评估",[286,459,460],{},"基于可观测性数据，Castrel 会评估：",[301,462,463,466,469],{},[304,464,465],{},"指标是否出现突发异常或频繁波动",[304,467,468],{},"黄金信号（延迟、流量、错误、饱和度）是否退化",[304,470,471,472,476],{},"SLO 是否被违反（你可以在对象知识中的 ",[473,474,475],"code",{},"slo.md"," 中定义自定义 SLO）",[290,478,479],{"id":479},"提升效果的小建议",[481,482,483,496],"table",{},[484,485,486],"thead",{},[487,488,489,493],"tr",{},[490,491,492],"th",{},"建议",[490,494,495],{},"说明",[497,498,499,510,520],"tbody",{},[487,500,501,507],{},[502,503,504],"td",{},[307,505,506],{},"接入全部数据源",[502,508,509],{},"Castrel 能访问的数据越完整（指标、日志、链路），分类就越准确",[487,511,512,517],{},[502,513,514],{},[307,515,516],{},"持续提供反馈",[502,518,519],{},"通过反馈帮助 Castrel 改进。除非你显式授权，我们的团队无法访问你的反馈对话或相关告警",[487,521,522,527],{},[502,523,524],{},[307,525,526],{},"记录已知行为",[502,528,529,530,532],{},"使用 ",[343,531,451],{"href":41}," 告诉 Castrel 哪些行为是预期内的（例如备份窗口）",[290,534,535],{"id":535},"常见问题",[537,538,540,543,549],"collapsible",{"name":539},"Castrel 如何给告警分类？",[286,541,542],{},"Castrel 会结合两种分析方式：",[286,544,545,548],{},[307,546,547],{},"黑盒分析"," 会检查告警规则的历史数据，识别频繁触发、自动恢复、与计划任务相关等模式。",[286,550,551,554],{},[307,552,553],{},"白盒分析"," 会查看告警对象的可观测性数据，判断黄金信号（延迟、错误、流量、饱和度）或 SLO 是否真的受到了影响。",[537,556,558],{"name":557},"我可以自定义分类阈值吗？","可以。你可以通过创建告警知识来自定义分诊行为。告警知识会通过对告警消息做文本匹配来触发，你可以借此告诉 Castrel 某类告警的预期行为、调查步骤或特殊处理规则。",[537,560,562,563,566],{"name":561},"支持哪些监控工具？","Castrel 可与 Prometheus、Grafana、Elasticsearch 等主流监控工具集成。完整列表请查看 ",[343,564,565],{"href":59},"集成文档","。",[537,568,570,571,575,576,579,580,583],{"name":569},"这和现有告警工具有什么不同？","传统告警工具只能告诉你 ",[572,573,574],"em",{},"发生了什么","。Castrel 会进一步告诉你 ",[572,577,578],{},"为什么会发生","、",[572,581,582],{},"接下来该怎么做","，省去你在多个系统之间来回手动排查的时间。",{"title":585,"searchDepth":586,"depth":586,"links":587},"",2,[588,589,590,591,592],{"id":292,"depth":586,"text":293},{"id":325,"depth":586,"text":325},{"id":419,"depth":586,"text":420},{"id":479,"depth":586,"text":479},{"id":535,"depth":586,"text":535},"使用 AI 洞察高效完成告警分诊与管理。","md",null,{},true,{"title":24,"description":593},"Ze9dOwVhP8tW3Z-XGtudRmQoDy2Nlvv1-5K-7Zx924k",[601,603],{"title":15,"path":16,"stem":17,"description":602,"children":-1},"几分钟内开始使用 Castrel。",{"title":28,"path":29,"stem":30,"description":604,"children":-1},"通过自动化根因分析与人机协作，更快完成事故调查。",1777027428313]