alerts should be relevant

alert fatigue will cause real issues to be ignored!

Maybe "1/2 a standard deviation above normal"