Configure the time window for alert groupingDetails There are 2 parameters that can be used to configure the time window for alert grouping sa_analytics.agg.query_dynamic_window which is set by default to 10 minutes, defines the maximum time difference between creation time of 2 alerts that can be added to a group. sa_analytics.agg.query_max_group_lifetime with a default value of 30 minutes, is the maximum period of time from group creation that we can add alerts to it. Question - How does the current 10 min & 30 min of the window is being determined? Answer - 10min is default value for 'sa_analytics.agg.query_dynamic_window' if not set 30min is default value for 'sa_analytics.agg.query_max_group_lifetime' if not set