cx-alerts

cx-alerts is a Coralogix-authored observability skill for managing alert definitions through the cx command-line interface. It solves the friction of hand-authoring the Coralogix alert API wire format by guiding an agent to list, inspect, create, delete, enable, disable, and mute alerts, plus manage suppression rules and inspect alert events and statistics. It maps natural-language requests such as create alert, investigate firing alerts, or silence an alert onto the correct cx subcommands and flags.

The skill documents the full cx alerts command surface, including list/get/create/delete/enable/disable, events and event-stats, and suppression-rules CRUD, with machine-readable output via -o json or -o agents and multi-profile targeting via -p. It enumerates the 12 Coralogix alert types (logs immediate/threshold/anomaly/ratio/new-value/unique-count/time-relative, metric threshold/anomaly, tracing immediate/threshold, and flow) and P1-P5 priority levels, and prescribes a create workflow that asks the user what to alert on and at what priority, builds the JSON payload in the API wire format, and verifies the result. Reference files cover DataPrime, PromQL, logs and spans querying, and alert schemas, including guidance on the span data model, field discovery, and duration units.

It is aimed at SREs, platform engineers, and developers who run Coralogix and want to manage alerting from an agent. Operations are performed through the official cx CLI against the user's own account and profiles, and the querying references are read-only investigative helpers.