An alert that fires too often gets ignored, and one that never fires misses the outage. Good alert design means paging a person only when users are affected and someone must act, and sending everything else to a ticket or dashboard. Alert on symptoms such as "error rate above 2% for 10 minutes", and link a runbook in the alert. Do not page on causes like high CPU alone, which is often harmless and leads to alert fatigue.