<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>告警治理 on XieJava's blog</title><link>http://xiejava.ishareread.com/tags/%E5%91%8A%E8%AD%A6%E6%B2%BB%E7%90%86/</link><description>Recent content in 告警治理 on XieJava's blog</description><generator>Hugo</generator><language>zh-CN</language><copyright>XieJava</copyright><lastBuildDate>Wed, 28 Oct 2026 10:30:00 +0800</lastBuildDate><atom:link href="http://xiejava.ishareread.com/tags/%E5%91%8A%E8%AD%A6%E6%B2%BB%E7%90%86/index.xml" rel="self" type="application/rss+xml"/><item><title>【一个人的SOC】(14) 告警治理——聚合、分级与 13/10/7/4 阈值统一的故事</title><link>http://xiejava.ishareread.com/posts/f8a3d2e9/</link><pubDate>Wed, 28 Oct 2026 10:30:00 +0800</pubDate><guid>http://xiejava.ishareread.com/posts/f8a3d2e9/</guid><description>从 103 万条原始告警到每天 ≤20 个可处理簇：告警指纹聚合（rule+agent+srcip）× 13/10/7/4 阈值统一（此前 4 套阈值打架、4921 条告警受影响）× AI 簇级研判 × 噪声抑制 × SLA 分级。&amp;#39;告警治理的本质不是让告警变多或变少，是让每一条都值得被看&amp;#39;——附真实数据验证。</description></item></channel></rss>