﻿---
title: Notifications and actions for the experimental alerting system
description: How to set up notifications and actions for rules in the experimental alerting system using workflows and action policies.
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/notifications-actions
products:
  - Kibana
applies_to:
  - Elastic Cloud Serverless: Experimental
  - Elastic Stack: Planned
---

# Notifications and actions for the experimental alerting system
Rules in the experimental alerting system don't send notifications directly. Instead, they produce alert episodes, and you use workflows and action policies to decide what happens next. For an explanation of how these two connect at runtime, refer to [Connect workflows](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/workflows-alerting).
<note applies-to="Elastic Cloud Serverless: Generally available, Elastic Stack: Generally available since 9.4">
  To use workflows, your role must have the appropriate privileges and your subscription must include workflows. Refer to the subscription page for [Elastic Cloud](https://www.elastic.co/subscriptions/cloud) and [Elastic Stack/self-managed](https://www.elastic.co/subscriptions) for a breakdown of available features by tier.
</note>


## Send notifications or trigger an action

To send a notification or trigger an action from a rule in the experimental alerting system:
1. [Build a workflow](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/workflows/get-started/build-your-first-workflow) that defines what to do, for example, send a message, call a webhook, open a case, or run any other automation.
2. [Create an action policy](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/action-policies/create-configure-action-policy) that routes alert episodes to that workflow. The action policy controls which alert episodes qualify, how they batch, and how often it invokes the workflow.
   For actions that fire exactly once in response to a specific alert episode state change (such as opening a ticket when an episode is assigned) use an [alert episode lifecycle trigger](/elastic/docs-content/pull/6525/explore-analyze/workflows/triggers/event-driven-triggers#alert-episode-lifecycle-triggers-event-driven) instead of an action policy. Refer to [Connect workflows](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/workflows-alerting) for a comparison of action policies and lifecycle triggers.


## Related pages

- [Connect workflows](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/workflows-alerting): Understand how action policies and lifecycle triggers invoke workflows at runtime.
- [About action policies](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/action-policies/about-action-policies): Understand how action policies evaluate and gate alert episodes.
- [Create an action policy](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/action-policies/create-configure-action-policy): Configure match conditions, grouping, frequency, and destinations.
- [Action policy reference](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/action-policies/action-policy-reference): Look up match condition fields, grouping modes, and frequency options.
- [Manage action policies](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/action-policies/manage-action-policies): Enable, disable, snooze, edit, or delete action policies.
- [Reduce notification noise](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/experimental-alerting-system/action-policies/reduce-notification-noise): Silence alert episodes using acknowledgment, snooze, and maintenance windows.