Schedule-based muting of alerts

[arisonl]

As a user I want to be able define a schedule based on which selected alerts can be muted. As an example in the case of known downtimes, to account for known seasonality etc.

[elasticmachine]

Pinging @elastic/kibana-alerting-services (Team:Alerting Services)

[pmuellr]

Is there another solution that's doing anything calendar-related like this? I'm thinking there is, but not sure which one.

I wonder if this will be simpler with cron support? Can these schedules be specified easily as cron expressions (guessing not, but worth poking at a bit more?)

I think there's an implication that you'd be setting a schedule on multiple alerts, and perhaps these scheduled mutes should be searchable/sortable for UI purposes.

Could there be multiple mute schedules for an alert? Can a single mute schedule include multiple date ranges?

Do we need support at the instance level, or is at the alert level good enough?

I wonder if we can fit this into the current schedule property? Eg, as a peer of interval, named muted?

kibana/x-pack/plugins/alerting/server/saved_objects/mappings.json

Lines 21 to 27 in e2c471b

	"schedule": {
	"properties": {
	"interval": {
	"type": "keyword"
	}
	}
	},

[mikecote]

Similar to #65706?

[mikecote]

Closing in favour of #65706.

[bradquarry]

@pmuellr just as a reference our ML UI does this. Turn off modeling during a window.