Alert Storage

Alerts are stored in the data directory. The UUID and engine node name are used to create the path to the storage directory. This path is stored along with the alert and recorded in the database as the storage_dir property of the alert.

The structure of the directory is as follows and is relative to the data directory.

NODE_LOCATION/UUID[:3]/UUID/

NODE_LOCATION is the name of the engine node that hosts the alert. Typically this is the local node name.

UUID[:3] is the first three characters of the UUID.

UUID is the UUID of the alert.

Inside the UUID directory are the data contents of the alert.

Alert Storage vs Database Storage

Although some alert data is stored in the database, the JSON data is the definitive source of data always.