Skip to content

GKGQueryingErrorRateHigh

Aggregate query error rate across all failure modes is above 5% for 5 minutes (the availability SLI). Severity s3, fires after 5m.

The aggregate error rate across the whole query pipeline (compilation, security, execution) exceeds 5%. This is the availability SLI for querying: users are getting failed Orbit API responses. Compile errors caused by bad client input count toward this rate, so a single broken client with enough volume can trip it without any server-side fault.

The firing expression, on gkg_query_pipeline_queries_total (emitted by the service, see the metrics catalog):

sum by (env, environment, stage) (rate(gkg_query_pipeline_queries_total{status!="ok"}[5m]))
/ sum by (env, environment, stage) (rate(gkg_query_pipeline_queries_total[5m])) > 0.05
  • Silence via Alertmanager filtered on the alertname.
  • Client-caused compile errors count toward this rate, so a single broken high-volume client can trip it without a server fault.
  • s3, no paging. This is the availability SLI for querying: users are getting failed Orbit API responses.

Break the rate down by failure mode to find what is actually failing:

sum by (status) (rate(gkg_query_pipeline_queries_total{status!="ok"}[5m]))
  • compile_error dominating: likely a client problem, cross-check GKGValidationFailedBurst.
  • execution dominating: ClickHouse is failing queries, check the graph ClickHouse health and load.
  • security dominating: cross-check GKGSecurityRejected and GKGAuthFilterMissing.
SymptomCauseAction
compile_error dominates the breakdownBroken client inputIdentify the client; cross-check GKGValidationFailedBurst
execution dominatesClickHouse failing queriesFollow GKGExecutionFailureRate
authorization dominatesRails redaction exchange failingFollow GKGAuthorizationFailureRate
security dominatesJWT problemsFollow GKGSecurityRejected
  • Execution failures: reduce ClickHouse pressure (pause indexing pools) or scale the ClickHouse service; a heavy indexing burst degrading reads is the most common cause.
  • Compile-error bursts from one caller: identify the client in the logs and fix or rate-limit it; the server needs no change.
  • A fresh deploy lining up with the alert: roll back the image tag.
  • Graph ClickHouse (ClickHouse Cloud)
  • GitLab Rails (JWT minting, internal Orbit API)
  • Workhorse (result streaming).

Ask in #f_orbit_dev (context_systems). If ClickHouse itself is unhealthy, check the ClickHouse Cloud console before escalating further.

  • Alert rule (hand-maintained; keep the expr above in sync when tuning it).