groups:
  - name: auth.rules
    rules:
      - alert: UserLoggedIn
        expr: increase(auth_sessions_active_by_user[1m]) > 0
        labels:
          severity: info
        annotations:
          summary: "Login: {{ $labels.username }} on {{ $labels.instance }}"
          description: "User {{ $labels.username }} logged in via {{ $labels.source }} on {{ $labels.instance }}."