Hi Dojo Community !
Is there any way, the correlation rule grouping can be done on the base alarm 'value' field ?
Hi ,
So the use case is , we have an alarm that has the same ‘Value’ field (which is the only property available for that timeout alarm) that I want to use to group them together and raise a single correlated alarm. The value only shows the IP address , so I wanted to group all the base alarms with the same IP address into one correlated alarm so the operators can click on the correlated alarm card and have the information of the all the base events collected . The parameter description has just the string ‘ DMA disconnected’ nothing specific to differentiate the alarm which is why I am utilizing that as a filter condition to pick up the base alarms
Hi,
I see that this question has been inactive for some time. Do you still need help with this? If not, could you select the answer that has been most helpful for you (using the ✓ icon) to indicate that the question is resolved?
As this question has now been inactive for a very long time, I will close it. If you still want more information about this, could you post a new question?
Hi,
would it be an option to use Automatic Incident Tracking instead of Correlation?
That feature is able to group timeout alarms with the same polling IP and it will do so by default once enabled.
More info can be found here.
Hi,
As far as I know it is not possible. However, please could you elaborate your use case? Maybe it is possible to use another grouping