Hi,

I have a correlation rule to collect the alarms and an automation script to send the alarms data as an email. It seems to work but with the active alarms but the problem is that it seems to include all the historical alarms from a few weeks ago which had been raised and cleared.

Below is the correlation rule that I have.

And it runs the script and passes the correlation rule id. With the Id, the script collects the alarms by running this code.

private List<int> GetAlarmIds(string correlationRuleId)
{
GetCorrelationStatusMessage msg = new GetCorrelationStatusMessage
{ ID = Guid.Parse(correlationRuleId), };

GetCorrelationStatusResponse response = Engine.SLNet.SendSingleResponseMessage(msg) as GetCorrelationStatusResponse;

var buckets = response.Status.Buckets;
var alarmIds = new List<int>();
for (int i = 0; i < buckets.Length; i++)
{
if (buckets[i].Mode.ToString() != “TrackCollection”)
{
continue;
}

for (int j = 0; j < buckets[i].TrackedTrees.Length; j++)
{
alarmIds.Add(Convert.ToInt32(buckets[i].TrackedTrees[j].Split(‘/’)[1]));
}
}

return alarmIds;
}

Could someone please advise me what I am missing here? Please let me know if anything else is needed. Many Thanks.