ATM small sites like eqsin can trigger the alert even when a single host fails:
07:49 <moritzm> godog: we should adapt thresholds per DC for the "widespread puppet failure" alert, cp5001 had an alert, which causes 5.5556% puppet failures for all of eqsin (which has 18 servers), which is above the threshold 08:16 <godog> moritzm: indeed! I'm filing a task 08:17 <moritzm> or maybe adapt the logic and have something like ">= x % and >= y hosts"