Hi, currently the correlation module does not allow to configure a rule which would collect (in a sliding window) the cumulative durations of a certain alarm which appears/disappears successively (so an alarm is raised and is active for some time and then is cleared, but then a bit later it appears again and so on) and if the cumulative time during that sliding window (for example half an hour) exceeds a specified time (for example 5 minutes) then the condition is met and an action can be performed (for example raise the alarm severity).
A typical use case would be to monitor the cumulative down-time of an interface and only if it remains down for a specified cumulative time during a certain period this is considered as a critical event.
Is this a feature which could be considered to be implemented on the Correlation engine?
Or would there be other ways to configure this with the existing functionality (so without for example having to make changes on a connector)?
Hi Conan,
It feels like you want to monitor 'the availability' of your interfaces. Maybe there are more parameters that can impact the availability and you want to create a service for it? In that case you can create SLA's to monitor the availability via outage configuration.