Hi, I have the following correlation rule in effect:
However the way alarms are cleared in the Active Tree Status does not quite make sense to me and I'm hoping to understand the logic behind it:
So first I raise an alarm which will trigger the Correlation alarm.
Next I raise another alarm which triggers the same Correlation alarm.
I then clear the first alarm. But what I'm seeing is that the alarm is held at the severity level of the second alarm. I'm expecting the first alarm to be cleared. Is this expected behavior?
Only clearing the second alarm clears the first alarm and the correlation alarm
As Michael mentioned, the cell in the table will keep showing Critical as there is still a correlated alarm active on there, even after the original real alarm has cleared.
As for the alarm console, what's being displayed is the history of the correlation alarm tree (green), with the current list of base alarm events below (blue).
The correlation rule you have keeps track of all active alarm trees which match your filter. When the first one comes up, a correlated alarm is generated on that parameter. Subsequent alarm trees end up under the same correlated alarm event. The correlated alarm event gets cleared once the last alarm has been cleared.
The additional info is much appreciated Wouter.