Hello, everyone!
I am trying to set up an automation that triggers when two critical alarms, each from a different element, occur simultaneously. For this, I configured the correlation rule using two "Generic Dummy" elements ('Dummy 01 Test' and 'Dummy 02 Test'), based on the 'Dummy Parameter 01', only for testing purposes. When the value of this parameter is 0, a critical alarm is generated for each element. The rule configuration is as shown in the screenshot attached.
I would like to know how I can ensure that the automation is executed only when both critical alarms occur simultaneously, i.e., when the parameter values in both elements are 0 at the same time. The way I'm doing it isn't working, and I would like to know if there's a way to fix this.
Thank you in advance for your help!
Hi Daniel,
Your rule is almost correct:
The alarm filter configures the rule to keep track of the active alarm events of both element 1 and 2. This is fine.
The rule conditions define when the rule should actually execute actions. In your case, it defines a filter condition, basically saying "There needs to be one alarm tree which matches a given condition". The condition itself here requires the alarm to be both an alarm on 1 and an alarm on 2 at the same time, which will never be true.
To fix this, split this up into two filter conditions, so making it as follows
"Filter Condition": element/param 1 AND value equals X
AND
"Filter Condition" element/param 2 AND value equals X
Each of these filter conditions will match with one of the expected alarm events. Combining them with AND will make the rule trigger only when both are active at the same time.
Hope this helps!
Thanks a lot for the help! That was exactly the issue — I hadn’t tried splitting the conditions like that. It worked perfectly. Really appreciate it!