Overview
Annotations in Sift represent key events or findings identified within telemetry based on a Rule’s evaluations or user observations. Annotations are automatically or manually created to highlight moments of interest such as anomalies, threshold crossings, or behavioral changes. In Explore v2 (Beta), in additional to automatically created Annotations, you can create Annotations manually. You can then overlay them with your data and use them for alignment.Viewing Annotations
Annotations Tree
The Annotations tree is the primary way to browse Annotations. Open it by selecting the Annotations tab in the sidebar. The tree is organized hierarchically. Annotations are grouped under their associated runs and assets, followed by the subgroup for each rule. Manual Annotations are grouped under Manual Annotations. Each node shows:- Annotation name
- Time (formatted as HH:MM:SS)
- Duration
- A color-coded left border indicating state: amber for Open, red for Failed, blue for Accepted.
- Right-click a parent node (run, asset, or rule group) to plot or unplot all child Annotations at once
- Right-click an individual Annotation, and click View Details, to see all of its settings
Annotation Details Panel
To see an Annotation’s details, right-click the Annotation in the sidebar and select View Details. The details panel displays:- Name and archive status
- Status (in Data Review type only): a segmented control to transition between Open, Flagged, and Resolved
- Type: Phase or Data Review
- Start time, End time, and Duration
- Description
- Linked assets: hover overs cards for quick asset info
- Run: Linked Run
- Tags
- Rule: if the Annotation was created by a rule, the rule name, expression, and version are displayed
- Assigned to (in Data Review type only): select or change the assigned team member
- File attachments
- Comments: a rich text comment thread for discussion
- Activity log: chronological record of state changes, assignments, and comments
Annotations Timeline
Below the timeseries chart, an Annotations timeline provides a compact visual overview of all Annotations within Runs across the current time range. The timeline respects the chart’s zoom range. Hover over an Annotation in the timeline to preview and view details:- Instantaneous Annotations (start time equals end time) are displayed as triangles on the timeline.
- Annotations with duration are displayed as a highlighted range.
- A cross-hatched area within the timeline indicates a Rule was rate-limited due to a high volume of events. The period between when this Rule started and stopped triggering is captured by the Annotation.