oncall-triage

Triages active Grafana OnCall alert groups via gcx list, inspect, acknowledge, silence, and resolve commands.

581|46|Updated Mar 23, 2026
One-click install
npx skills add https://github.com/grafana/gcx --skill oncall-triage
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: oncall-triage
Source: https://github.com/grafana/gcx/tree/main/claude-plugin/skills/oncall-triage
Command: npx skills add https://github.com/grafana/gcx --skill oncall-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

On-call engineers need to quickly answer "what is paging right now" and act on active Grafana OnCall alert groups without manually calling OnCall APIs or clicking through the UI.

Core Features & Use Cases

  • List and filter alert groups: Query active alert groups by state, team, integration, escalation chain, or time window using gcx irm oncall alert-groups list.
  • Drill into groups and alerts: Inspect a group's labels, timestamps, and links to the originating alert rule, dashboard, or SLO, plus per-alert detail when multiple instances are firing.
  • Take action safely: Acknowledge, silence, resolve, or delete alert groups individually or in bulk, with mandatory confirmation before bulk operations.
  • Use Case: During an incident, list all firing alert groups for your team, inspect the noisiest one to find its Grafana alert rule, silence it for an hour, then pivot to rule-side root cause investigation.

Quick Start

Ask the assistant to show what is currently paging in Grafana OnCall and acknowledge the alert group you specify.

Frequently Asked Questions about oncall-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I list active Grafana OnCall alert groups from the CLI?

Run `gcx irm oncall alert-groups list` to show firing, acknowledged, and silenced root alert groups. Narrow results with flags like `--state`, `--team`, `--integration`, `--escalation-chain`, `--mine`, or `--max-age`.

How do I silence or acknowledge an OnCall alert group in bulk?

Omit the alert group ID and pass filter flags such as `--team <PK> --state firing` with the acknowledge or silence verb. In agent mode, bulk actions affecting more than one group require `--force` after user confirmation.

What is the difference between OnCall alert groups and Grafana alert rules?

Alert groups are post-routing aggregations of alert deliveries that answer what is paging right now. Alert rules answer why a rule is evaluating to firing; use the investigate-alert skill for rule-side root cause analysis.

Can I filter OnCall alert groups by title or keyword?

There is no built-in title or substring filter. Fetch JSON output, filter with jq on the title field, then loop the matching IDs through the action verb, or use team and integration filters for bulk operations.

Why does an alert group show empty labels or missing links?

Webhook and formatted_webhook integrations produce partial status.links and empty subject.labels, which is expected behavior rather than an error. Use `--include-raw` to inspect the unprocessed Alertmanager payload.