---
title: Manage action policies for the experimental alerting system
description: View policy details, enable, disable, snooze, review execution history, and rotate API keys for action policies in the experimental alerting system.
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/kibana-alerting-experimental/action-policies/manage-action-policies
products:
  - Kibana
applies_to:
  - Elastic Cloud Serverless: Experimental
  - Elastic Stack: Planned
---

# Manage action policies for the experimental alerting system
Action policies are part of the experimental alerting system in Kibana. This page covers how to view policy details, enable and disable policies, snooze them during planned outages, rotate their API keys, and review execution history.

## View policy details

From the **Action policies** list, you can open a policy to see its full configuration, including match conditions, grouping mode, frequency, and destinations. The list also shows the display name of the user who created the policy and the user who last updated it. You can also edit, clone, delete, enable, disable, snooze, or update its API key without leaving the list page.

## Execution history

After each dispatcher run, Kibana records the outcome in the `.alert-actions` index. These records let you audit whether workflows were invoked, skipped, or had no matching policy for each alert episode.

| Outcome      | What it means                                                                                                                                                                                                                                                   |
|--------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| `dispatched` | The dispatcher invoked a workflow for the alert episode.                                                                                                                                                                                                        |
| `throttled`  | The alert episode matched a policy but was rate-limited by the frequency setting. No workflow ran.                                                                                                                                                              |
| `suppressed` | Dispatch was blocked. The alert episode was acknowledged, snoozed, or deactivated, or the space is currently in a [maintenance window](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/alerts/maintenance-windows). |
| `unmatched`  | No action policy matched the alert episode. No workflow ran.                                                                                                                                                                                                    |

The **Execution history** view lets you search these records by policy name, rule name, or saved-object ID, and filter by outcome.
To query raw dispatch records directly, open Discover and query the `.alert-actions` index. Filter by `action_type` to narrow by outcome, or by `policy_id` to filter by policy.

## Enable, disable, and snooze

You can disable a policy so it is not evaluated for new alert episodes. You can snooze a policy for a defined window so that it does not dispatch notifications during that period. Policies that are not enabled or are snoozed are skipped when the dispatcher evaluates policies.
<note>
  Snoozing a policy differs from [snoozing an alert episode](/elastic/docs-content/pull/6525/explore-analyze/alerting/kibana-alerting-experimental/action-policies/reduce-notification-noise#snooze-scope). When you snooze a policy, the dispatch mechanism is paused and every series the policy would process is silenced. When you snooze an alert episode, you target one specific series before policy matching runs, silencing it regardless of which policy would have handled it. Use alert snooze when you want to quiet a specific recurring alert without affecting other series handled by the same policy.
</note>


### Maintenance windows

During a [maintenance window](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/alerts/maintenance-windows), action policies stop dispatching notifications automatically. No policy configuration is required. Rule evaluation continues and alert episodes are still recorded in `.rule-events`. Maintenance windows are configured separately, not on the action policy.

## Update API keys

You can rotate the API key used to run a policy's workflows without changing matchers or destinations. Use the **Update API key** action on one policy or for multiple selected policies.
<important>
  **Production considerations**When you update or delete an action policy, previous API keys used for execution are marked for invalidation and removed on a schedule managed by Kibana. Allow for a short delay before new keys are used for dispatch.
</important>


## Bulk actions

On the action policies list, select one or more policies to enable, disable, snooze, and do more in bulk. **Select all** selects every policy on the current page of results. Clear the selection before changing filters if you need a different set.

## Related pages

- [Reduce notification noise in experimental alerting system](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/kibana-alerting-experimental/action-policies/reduce-notification-noise) to silence individual alert episodes using acknowledge, snooze, or deactivate.
- [Action policy reference in experimental alerting system](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/kibana-alerting-experimental/action-policies/action-policy-reference) to look up match condition fields, grouping modes, and frequency options.
- [Create and configure an action policy](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6525/explore-analyze/alerting/kibana-alerting-experimental/action-policies/create-configure-action-policy) to set up or update the policies you manage here.