Network Alerts

Summary

Introduce proactive network alerting so operators are notified when connectivity, node health, or security-relevant conditions change - before users report issues.

Goals

• Detect and notify on important network events (e.g. node offline, gateway degradation, ACL/policy violations, unusual connectivity)
• Support configurable alert rules and notification channels
• Complement existing SIEM export with actionable, near-real-time operator alerts
• Improve MTTR for network and access incidents

Scope (initial)

• Alert rule definitions (thresholds, conditions, severity)
• Core event types: node status, gateway health, connectivity failures, security events
• Notification integrations (e.g. email, webhook; optionally Slack/Teams)
• Alert history and acknowledgment in the UI/API

Success criteria

• Admins can define and enable alert rules per network/tenant
• Alerts fire reliably for configured conditions
• Notifications are delivered to configured channels with enough context to act