{"id":4992,"date":"2026-03-24T12:43:43","date_gmt":"2026-03-24T15:43:43","guid":{"rendered":"https:\/\/24cevent.com\/como-definir-reglas-de-escalamiento-bien\/"},"modified":"2026-04-29T11:39:11","modified_gmt":"2026-04-29T14:39:11","slug":"como-definir-reglas-de-escalamiento-bien","status":"publish","type":"post","link":"https:\/\/24cevent.com\/en\/como-definir-reglas-de-escalamiento-bien\/","title":{"rendered":"How to define scaling rules well?"},"content":{"rendered":"\n<p>Defining scaling rules seems simple.<\/p>\n\n<p>But in practice, it is one of the main reasons for incidents:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>are delayed<\/li>\n\n\n\n<li>bounce between teams<\/li>\n\n\n\n<li>or escalate too late<\/li>\n<\/ul>\n\n<p>And almost always the problem is not the tool.<\/p>\n\n<p>\ud83d\udc49 It&#8217;s how the rules are defined.<\/p>\n\n<h1 class=\"wp-block-heading\">In simple<\/h1>\n\n<p>A good scaling rule should:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>notify the correct person<\/li>\n\n\n\n<li>ensure that someone responds<\/li>\n\n\n\n<li>escalate if no response<\/li>\n\n\n\n<li>do it in a timely manner<\/li>\n\n\n\n<li>avoid unnecessary noise<\/li>\n<\/ul>\n\n<p>Not before, not after. At the right time. <\/p>\n\n<h1 class=\"wp-block-heading\">The most common mistake<\/h1>\n\n<p>Many rules are defined as follows:<\/p>\n\n<p>\ud83d\udc49 &#8220;if no one responds in X minutes, escalate.&#8221;<\/p>\n\n<p>And although it sounds logical, it doesn&#8217;t always work well.<\/p>\n\n<p>Because not all alerts are the same.<\/p>\n\n<p>Result:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>critical alerts escalate late<\/li>\n\n\n\n<li>minor alerts escalate unnecessarily<\/li>\n\n\n\n<li>team loses focus<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 More noise is generated than value.<\/p>\n\n<h1 class=\"wp-block-heading\">Understanding the levels: N1, N2, N3<\/h1>\n\n<p>To define scaling properly, one must first understand this:<\/p>\n\n<h2 class=\"wp-block-heading\">\ud83d\udd39 N1 (first level)<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>review the alert<\/li>\n\n\n\n<li>validates if real<\/li>\n\n\n\n<li>attempts to solve simple problems<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 is the first filter<\/p>\n\n<h2 class=\"wp-block-heading\">\ud83d\udd39 N2<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>further analyzes<\/li>\n\n\n\n<li>solves more complex technical problems<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">\ud83d\udd39 N3<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>specialists<\/li>\n\n\n\n<li>critical or structural problems<\/li>\n<\/ul>\n\n<p>The goal of scaling is clear: to <strong>solve as quickly as possible, with the correct level<\/strong><\/p>\n\n<h1 class=\"wp-block-heading\">So what happens in practice?<\/h1>\n\n<p>Many times:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>N1 is overloaded<\/li>\n\n\n\n<li>is delayed in analyzing<\/li>\n\n\n\n<li>or simply pass everything to N2<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 Result: N2 and N3 collapse<\/p>\n\n<p>Or the other way around:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>the N1 stays too long with something it cannot resolve<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 Result: the problem escalates late.<\/p>\n\n<h1 class=\"wp-block-heading\">This is where time is gained (or lost).<\/h1>\n\n<p>Efficiency is not in scaling faster.<\/p>\n\n<p>You are in:<\/p>\n\n<p>\ud83d\udc49 <strong>better scaling<\/strong><\/p>\n\n<p>That means:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>know when to climb<\/li>\n\n\n\n<li>to know who to scale<\/li>\n\n\n\n<li>and avoid unnecessary escalations<\/li>\n<\/ul>\n\n<h1 class=\"wp-block-heading\">What if the N1 was not manual?<\/h1>\n\n<p>Here is something interesting.<\/p>\n\n<p>Much of N1&#8217;s work is:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>review alerts<\/li>\n\n\n\n<li>search for context<\/li>\n\n\n\n<li>identify probable cause<\/li>\n\n\n\n<li>perform simple actions<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 repetitive tasks<\/p>\n\n<p>Today this can be automated.<\/p>\n\n<p>With tools such as <strong>24Brains (24Cevent add-on)<\/strong>, the N1 can be automated:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>analyzes the alert<\/li>\n\n\n\n<li>systems consultation<\/li>\n\n\n\n<li>identifies root cause<\/li>\n\n\n\n<li>executes simple actions if applicable<\/li>\n\n\n\n<li>decides whether to scale (and with what context)<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 It&#8217;s like having an N1 working in seconds.<\/p>\n\n<h1 class=\"wp-block-heading\">What does this change?<\/h1>\n\n<p>A lot.<\/p>\n\n<h2 class=\"wp-block-heading\">Formerly<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>N1 takes time<\/li>\n\n\n\n<li>filter manually<\/li>\n\n\n\n<li>scale with little information<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">Then<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>immediate analysis<\/li>\n\n\n\n<li>fewer false positives<\/li>\n\n\n\n<li>scaling with clear context<\/li>\n\n\n\n<li>less load for N2 and N3<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 Scaling stops being reactive. It becomes intelligent. <\/p>\n\n<h1 class=\"wp-block-heading\">How to define good scaling rules?<\/h1>\n\n<h2 class=\"wp-block-heading\">1. Classify your alerts well<\/h2>\n\n<p>Not all alerts should escalate equally.<\/p>\n\n<p>Defines:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>reviews<\/li>\n\n\n\n<li>high<\/li>\n\n\n\n<li>stockings<\/li>\n\n\n\n<li>cancellations<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 each with its own logic.<\/p>\n\n<h2 class=\"wp-block-heading\">2. Define realistic times<\/h2>\n\n<p>Don&#8217;t use one time for everything.<\/p>\n\n<p>Example:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>criticality \u2192 scalar in minutes<\/li>\n\n\n\n<li>average \u2192 more time<\/li>\n\n\n\n<li>low \u2192 maybe not even climb<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">3. Secure confirmation<\/h2>\n\n<p>Notification is not enough.<\/p>\n\n<p>\ud83d\udc49 someone has to accept the alert.<\/p>\n\n<p>If there is no confirmation:<\/p>\n\n<p>  auto-scaling<\/p>\n\n<h2 class=\"wp-block-heading\">4. Scale with context<\/h2>\n\n<p>One of the biggest mistakes:<\/p>\n\n<p>scalar without information<\/p>\n\n<p>Each escalation should include:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>what happened<\/li>\n\n\n\n<li>what was intended<\/li>\n\n\n\n<li>what was found<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 This greatly reduces resolution times.<\/p>\n\n<h2 class=\"wp-block-heading\">5. Avoid climbing for climbing&#8217;s sake<\/h2>\n\n<p>More scaling \u2260 better operation<\/p>\n\n<p>too much climbing leads to fatigue<\/p>\n\n<p>The objective is:<\/p>\n\n<p>\ud83d\udc49 f <strong>ewer but better scalings<\/strong><\/p>\n\n<h1 class=\"wp-block-heading\">So, what is good climbing?<\/h1>\n\n<p>It is not just passing the alert to another level.<\/p>\n\n<p>Es:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>filter correctly<\/li>\n\n\n\n<li>make an informed decision<\/li>\n\n\n\n<li>provide context<\/li>\n\n\n\n<li>ensure response<\/li>\n<\/ul>\n\n<p>\ud83d\udc49 and do it fast<\/p>\n\n<p><\/p>\n\n<p>Scaling rules are not a technical detail.<\/p>\n\n<p>They are one of the most important parts of the operation.<\/p>\n\n<p>And when combined with automation in the N1:<\/p>\n\n<p>\ud83d\udc49 the impact is immediate<\/p>\n\n<ul class=\"wp-block-list\">\n<li>less noise<\/li>\n\n\n\n<li>less downtime<\/li>\n\n\n\n<li>less overhead<\/li>\n\n\n\n<li>better decisions<\/li>\n<\/ul>\n\n<p><\/p>\n\n<p>If today your team feels that alerts are escalating late, poorly or with little context, it&#8217;s probably not a problem with the tools, but with how the rules are defined.<\/p>\n\n<p><strong>24Cevent allows you to set up flexible escalations and ensure responsiveness, and together with 24Brains automates the initial analysis, helping each alert reach the right level at the right time.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Many rules are defined as follows: &#8220;if no one responds in X minutes, escalate&#8221; And although it sounds logical, it does not always work well.<br \/>\nBecause not all alerts are equal.<br \/>\nResult: critical alerts escalate late<br \/>\n, minor alerts escalate unnecessarily, the team loses focus = More noise than value is generated.<\/p>\n","protected":false},"author":2,"featured_media":4990,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[178],"tags":[231,229,182,232,233,230],"class_list":["post-4992","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-knowledge-center","tag-definition-of-scaling-rules","tag-escalation","tag-it-incidents","tag-n1","tag-n2","tag-scaling-rules"],"_links":{"self":[{"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/posts\/4992","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/comments?post=4992"}],"version-history":[{"count":1,"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/posts\/4992\/revisions"}],"predecessor-version":[{"id":4993,"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/posts\/4992\/revisions\/4993"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/media\/4990"}],"wp:attachment":[{"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/media?parent=4992"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/categories?post=4992"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/24cevent.com\/en\/wp-json\/wp\/v2\/tags?post=4992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}