Hello DM forum,
Here my scenario, I have configured correlation rule to send Slack alerts. The correlation rule, the alarm filter: “is – view- services- and – severity – equal to – critical – and – services – not equal to”
One of my services is constantly triggering the fault however, I only want to mute slack alert for 1 of 10 services for that element. I only see that I can mute the element which will mute all the services. Is there another work around for this to mute one service. I dont have the option of doing it from the actual device (outside of dataminer)
Thank you,
Juan
@Tobe
I edited the correlation rule to the following
“and > Service > Not Equal to > Service Name” This has stopped the configured slack alerts.
Thank you for your help.
Regards,
Juan
Thanks @Tobe.Deprez
I will configure and test, will followup with findings. Sorry cant add screenshots.
I am not completely sure that I understand the problem correctly, but it seems to me you can use the ‘And Not (‘ option in the alarm filter to exclude alarms that are both on the faulty element and service, like this
This will include alarms on view ‘Services’ with severity ‘Critical’ in your correlation rule, except if they occur on ‘Element1’ and ‘Service2’.