Overview
Modern infrastructure generates alerts from dozens of monitoring tools, making it difficult to cut through the noise and respond to real incidents. Solace is an open-source alert management and incident response platform that ingests alerts from any monitoring source, deduplicates them, auto-correlates them into incidents, and provides a single dashboard for managing the response.
Key Features
- Multi-Source Alert Ingestion – Accepts alerts via webhooks from Prometheus Alertmanager, Splunk, email, and generic sources.
- Fingerprint-Based Deduplication – Prevents alert fatigue by intelligently deduplicating identical alerts.
- Automatic Incident Correlation – Groups related alerts into incidents based on the originating service.
- Severity Auto-Promotion – Automatically escalates incident severity to match the worst alert in the group.
- Full Event Timeline – Records all user actions with a complete audit trail for post-incident review.
- One-Click Acknowledge & Resolve – Streamlines incident response directly from the dashboard.
- Auto-Resolution – Automatically resolves incidents when underlying alerts clear.
Architecture & Tech Stack
| Layer | Technologies |
|---|---|
| Backend | Python 3.11+, FastAPI, SQLAlchemy (async), Alembic, PostgreSQL, Redis |
| Frontend | React 18, TypeScript, Vite, Tailwind CSS |
| Infrastructure | Docker, Docker Compose |
Implementation Details
- Alert Ingestion
- Webhook endpoints accept alerts from multiple monitoring tools with configurable source adapters.
- Alerts are normalized into a common schema regardless of origin.
- Deduplication & Correlation
- Each alert is fingerprinted to detect duplicates within configurable time windows.
- Related alerts are automatically grouped into incidents by service.
- Incident Management
- A React-based dashboard provides real-time visibility into all active incidents.
- Users can acknowledge, resolve, and annotate incidents with full audit logging.
- Pluggable Architecture
- New alert sources can be added by implementing a simple adapter interface.
- Configurable deduplication and correlation windows allow tuning for different environments.
Benefits of This Approach
- Reduces Alert Fatigue – Deduplication and correlation surface only actionable incidents.
- Vendor Agnostic – Integrates with any monitoring tool that supports webhooks.
- Self-Hosted – Full control over data and infrastructure with no SaaS dependency.
- Open Source – Transparent, extensible, and community-driven.
Get in Touch
Interested in implementing a unified alert management platform for your organization? Contact us to discuss how we can help streamline your incident response workflows.