Hi Dojo,
Today I noticed that an external Arista switch is in timeout for a couple of days.
To detect this much faster in the future I’ve created a correlation rules that sends a mail when the switch is in timeout for more than 1 hour.
Although that above code seems fine to me, it doesn’t work when I test the rule.
When I use Immediate evaluation for the same period instead, I see some test results
What am I doing wrong?
Jens Vandewalle [SLC] [DevOps Enabler] Selected answer as best 17th February 2022
You have an empty condition?
Jens Vandewalle [SLC] [DevOps Enabler] Selected answer as best 17th February 2022
You’re right. Moving severity filter from Alarm Filter section to Rule Condition section works. Thank you!