Hi all,
Is it possible to create a correlation rule where the parameter description is slightly different, but they have something in common?
In the following example, all ports from a device could match with wildcard *H40,49,RT12*
How could be possible from Dataminer to create a generic logic for those kind of alarms so they can be included in one single correlated alarm?
Thanks.
Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 28th August 2023
Hi Edson,
Could it be the case that 'ONT Down (ON If Status)' is the column name and the remaining part is the index of the table?
If this is the case, when building the alarm filter (using the parameter description) you could:
- Enter several indices separated by semicolon
- Use the wildcard * that represents a string of 0 or more characters
- Use the wildcard ? that represents a single character
Based on your example, you could try the following filter:
Hope it helps.
Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 28th August 2023