I have a correlation rule that generates a new alarm with a specific alarm value. I’d like to also include the impacted service in the alarm value as this alarm is being forwarded to a Slack integration. Can you suggest how to do this? Impacted service(s) does not appear to be a field value that can be used in correlation actions.
Hi Jim,
The best way to achieve this is by creating the correlated alarm on an element which impacts the same service as the base alarm.
You can also combine this with alarm grouping :
This means that the alarms will be grouped by service and that a correlated alarm will be generated for each impacted service.
Hi Jim,
Unfortunately it is not possible to pass the service into your message. Maybe you can add this as a feature suggestion https://community.dataminer.services/feature-suggestions
Hi Michael,
Thanks for the response! I am creating the alarm on an element that impacts the service, and am grouping them by service in the correlation. The challenge I face is that the new alarm created does not reference the service in Description or Value, therefore the end users don’t know which service has “caused” the alarm.
I’ve attached screenshots to the original questions showing the alarm, and its correlated new alarm along with the resulting slack messages. My goal is to have the affected service (there will only be one) shown in the message as well.