Alert deduplication referral brief template, with a completed example for an operations center

Short answer

A company introduction about alert deduplication decisions needs nine facts, all gathered from conversation: company size, the monitoring and incident tools, years of history, rough incident volume, how often merges carry a written reason, who owns the records, who can authorize a discussion, the date the old tool goes dark, and whether the records cover customer environments or name employees. Add one open question. Never attach alerts, notes, exports or logins.

Visual briefFull-size diagram
A referral brief form where eight of its fields fill in one by one with Illustrative values: 520 full-time employees, monitoring, router and tracker tools, history since 2019, about 2,400 incidents a year, owner, authorized contact, deadline and the open question.
Illustrative values for a fictional managed service provider. The brief holds metadata only.

This template belongs to the alert deduplication decisions guide. Copy the blank brief, fill it in with the operations center director, then read the completed example below to check the level of detail.

How to fill in the brief

Fill the brief in one conversation, from memory and the migration plan, without opening any tool. Three rules keep it useful and safe:

  1. Metadata only. What exists, how much, how long, which system, who owns it. No alert text, hostnames, customer names, employee names or screenshots.
  2. Ranges are fine. "About 2,000 to 3,000 incidents a year" is enough. Mark anything you are unsure of as "not known".
  3. Two names, two roles. The person who explains the records and the person who can authorize a discussion are often different people. The who-can-license decision tree helps tell them apart.

The blank brief

FieldWhat to writeWhere the answer comes from
Company and sizeSector, country, full-time headcount at peak (contractors excluded)Company website, the director
Monitoring and incident toolsPlain-text names of the monitoring platform, event router, incident tracker and chatThe director
Years of historyFirst year each tool holds alerts, groups, incidents and notesThe director, the platform lead
Rough volumesIncidents a year; alerts a day, as a rangeThe director
Decision qualityShare of merges or splits with a written reason; do rule changes cite incidents?The director
Records ownerThe executive who owns production dataThe director, then confirmed with that executive
Authorized contactThe person who agreed to take an introductionThat person
DeadlineDate the old monitoring tool's contract ends or its server is switched offMigration plan
Customer or privacy factorsMonitors customer environments? Notes name employees?The director, counsel later
Open questionOne thing the records might show that nobody has checkedYour conversation

Ten rows fit on one page. If a row needs more than two lines, it probably contains detail that belongs in SourceX's review, not the introduction.

A completed brief (Illustrative)

Invented for this page. The company, figures and dates are fictional.

FieldCompleted entry
Company and sizeManaged service provider, United States, 520 full-time employees
Monitoring and incident toolsLegacy monitoring platform, an event router, an incident tracker and a team chat tool
Years of historyAlerts and groups since 2019; incidents since 2018; chat since 2021
Rough volumesAbout 2,400 incidents a year; 30,000 to 50,000 alerts a day across customers
Decision qualityDirector estimates a third of merges carry a written reason; rule commits cite tickets since 2022
Records ownerChief technology officer
Authorized contactChief operating officer, who agreed to a short call
DeadlineLegacy monitoring contract ends next June
Customer or privacy factorsMonitors about 140 customer environments; notes name engineers; counsel not yet consulted
Open questionWhen one customer's outage set off alerts across shared infrastructure, does the record show who tied them together and why?

Why this example works. Every entry is a fact about the records, not a copy of one. The volumes are ranges. The customer factor is stated plainly instead of hidden, which saves time in review, because customer contracts will decide what an MSP can license. The open question links to a documented tool behavior: PagerDuty's Intelligent Alert Grouping compares alert summaries for textual similarity by default, and its Events API only joins events that share a dedup_key, so cross-customer storms are exactly where a human merge leaves the most useful trace. Alertmanager-style inhibition rules, which suppress some alerts while others fire, are the policy that often follows.

The client opportunity brief generator can turn these answers into a short note, and the warm introduction brief for a business owner shows the covering message.

What to leave out

  • Alert payloads, hostnames, IP addresses or customer names
  • Incident numbers, note text or chat excerpts
  • Dashboards, screenshots or tool exports
  • Logins, API keys or invitations to the monitoring tools
  • Any estimate of what the records are worth

If the director offers any of these, thank them and decline. SourceX's review asks for what it needs, under the company's own controls. The system map for alert deduplication records explains which joins the review will test.

Three checks before you send it

  1. Does the company qualify? It needs 50+ full-time employees at peak (contractors excluded), a documented operating history, rights to license the records and an authorized contact. Companies in the U.S., Canada and the EU qualify, as do companies in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia when at least 70% of the data is in English.
  2. Is the authorized contact real? A named person who agreed to the introduction, not a guess at a title.
  3. Have you signed the partner agreement? Partners sign the Channel Partner Agreement before submitting introductions. Credit goes to the first valid introduction within the 90-day window, recorded when the company submits a verified application.

What stays unknown until SourceX reviews it: the rights position, what would need removing, buyer interest and any terms. For finding more operations centers with this kind of history, see the incident and on-call records field guide and software consolidations.

Next step

Refer a company. No cap on rewards. Default reward on a company's first qualifying transaction: the greater of $50,000 plus 5% and 15% of Actual Supplier Payout, with no cap; further qualifying transactions first agreed within 12 months of the first Closing pay 15%. Eligibility and payment conditions apply, including the USD 100,000 Minimum Transaction, and a signed Schedule A or addendum can differ. A lead, meeting or signature alone does not trigger payment.

When the brief is complete and the authorized contact has agreed, register as a partner, confirm the company against who qualifies and read the program terms before you submit it.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Company signs and is paidThe company signs, delivers its data and is paid by SourceX under its agreement.
  4. Step 4You get your rewardthe greater of $50,000 plus 5% and 15% of the actual supplier payout, with no cap. A reward becomes payable after SourceX has paid the referred company under its signed agreement and the payout conditions in the program terms are met, including finance approval and your tax and payment details.

Common questions

Can I attach a sample alert export to make the brief stronger?

No. The brief is metadata only. Attaching alerts, incidents, screenshots or dashboards moves client records into an email thread they should never be in, and SourceX does not need them to decide whether to talk to the company.

What if I do not know the incident volume?

Write a range or 'not known'. An honest gap is more useful than a guess, and the operations center can supply the figure later in SourceX's review.

Sources

  1. refer.sourcex.si/terms
  2. support.pagerduty.com/main/docs/intelligent-alert-grouping
  3. developer.pagerduty.com/docs/events-api-v2/trigger-events/index.html
  4. prometheus.io/docs/alerting/latest/alertmanager

Free resources

Know a company with valuable proprietary data?

Become a referral partner, get your link and introduce the company’s CEO (in an owner-run company, usually the owner). Referral partners can join from most countries. We can't work with partners in countries or regions under U.S. sanctions or on U.S. restricted-party lists. The companies you introduce should be based in the U.S., Canada and the EU, or in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia with at least 70% of their data in English.

Refer a company →

I own a business

Explore licensing your company's data directly to SourceX for AI training and evaluation. Start a short assessment; no uploads needed.

Start an assessment