alerting

Threshold alarms page you all weekend yet sleep through Monday's actual outage. What interviewers reward is stripping out seasonality first, matching the detector to the anomaly, and tuning against alert fatigue. Here is the answer that holds up in production.

Models fail silently, so the real question is whether you would notice. What interviewers look for: watching the right layers (operational, data, prediction, outcome) and alerting on drift without drowning in false pages. This covers the system and the metrics that count.

Anomaly detection seems simple until seasonality, cold start, and alert fatigue arrive. The signal is modeling the expected baseline (including weekly and daily cycles), picking unsupervised methods when labels are scarce, and tuning so you do not bury users in false alarms. Here is the design.

An alert that fires nonstop gets muted, and a model that fails with no alert is worse still. Good ML alerting is a design problem sharing SRE's principles, with ML-specific twists on top. Here is how to get it right.