Moira is a real-time alerting tool, based on Graphite data.

Key Features

  • Graphite storage independence

    Some Graphite queries are very ineffective. Tools like Seyren multiply this effect by making lots of ineffective queries every minute, overloading your cluster. Moira relies on the incoming metric stream, and has its own fast cache for recent data.

  • Support for all Graphite functions

    Graphite function library is embedded directly into the source code of Moira. You can use any function and get predictable results, like in your Graphite dashboards.

  • Support for custom Python expressions

    If simple warning/error threshold is not enough, you can write flexible Python expressions to calculate trigger state based on metric data.

  • Tags for triggers and subscriptions

    When several teams/services share one monitoring tool, it is essential to provide some way of filtering triggers and subscriptions in the UI. Moira has a flexible tag system.

  • Extendable notification channels

    Moira has support for email, Slack and Pushover notifications out-of-the-box. But you can always write your own plugin in Go and rebuild Moira Notifier microservice.

  • Alarm fatigue protection

    Sometimes one of your triggers goes mad and switches back and forth between states, sending you hundreds of notifications. Sometimes you just ignore and delete all messages, accidentally also deleting one that is actually important. Moira tries to protect you with a feature called throttling. It’s simple: if one of your triggers starts to send more than 10 messages over an hour, Moira limits this trigger to one message per 30 minutes. Alerts from this trigger are combined, and not lost - just packaged into a single message.


By default, Moira stores metric history for one hour. This ensures performance under heavy load. You can tweak this in config file, but note that performance will degrade.

In order to reduce database load, Moira checks every single trigger at most once every 5 seconds. Probably, your metrics arrive once every minute, so you really won’t notice this limitation. You can also tweak this in config file.


In spirit of Graphite architecture, Moira consists of several loosely coupled microservices. You are welcome to replace or to add new ones.


Cache is a lightweight Go application responsible for receiving lots of metric data in Graphite format. Cache filters received data and saves only metrics that match any of user triggers. This reduces load on all other parts of Moira.


Checker is a Python application with embedded Graphite functions. Checker watches for incoming metric values and performs checks according to saved trigger settings. When state of any trigger changes, Checker generates an event.


Notifier is a Go application that watches for generated events. Notifier is responsible for scheduling and sending notifications, observing quiet hours, retrying failed notifications, etc.


API is a Python application that serves as a backend for UI.


UI is a frontend Angular application, it looks like this:

ui screenshot


All services communicate only through a Redis database, without any additional protocols or connections between each other.