A customer asked me the following:
“I'm trying to trigger a script every time an element is in timeout. To achieve that, I created a correlation rule that captures the timeout but is failing at the return to normal (communication restored, timeout gone).
This is the correlation rule that I have:
The timeout is captured correctly; however, during the return to normal, other events are also captured.
How can I create a rule that captures ONLY the events related to timeout?”
The correlation rules for capturing timeout events under the "Severity = Timeout" rule are now working correctly.
What I need now is to be able to detect when those alarms are cleared. I need to apply actions to the alarm when it is cleared. How can I accomplish this?
Hi Arturo,
I have it running like this:
After the 5min I'm receiving an email.
Hi Arturo,
Could you double check that neither the checkbox 'Autoclear' (for new correlated alarms) nor 'Execute on clear' (for 'Run Scripts') is selected?
Hope it helps.