Can you in any way, use correlation to de-escalate an alarm.. so from Critical to Major for example.
Ken O'Connor [DevOps Advocate] Selected answer as best 26th August 2021
Hi Ken,
Currently there is no action on correlation rules to de-escalate alarms (only to escalate alarms). A possible workaround is to create a correlation rule that creates a correlated alarm that will update the base alarm to a different severity. In the example below, I created a correlation rule to update the initial severity of an alarm from Critical to Minor:
Ken O'Connor [DevOps Advocate] Selected answer as best 26th August 2021
Hi Miguel..
Yes thats the way I thought.. Thanks ..