How to...suppress or throttle Slack notifications during an alarm storm once multiple elements have triggered an alarm. My understanding once the alarms have triggered (Alarm Storm) and correlation rules send slack notifications, there is no way to stop it.
Hi Juan,
Besides what Miguel has mentioned, and depending on your use case, you could look into the "Collect events for ... after first event, then evaluate conditions and execute actions" trigger mechanism.
This could serve almost as a throttling mechanism.
Hi Juan,
To avoid the correlation rule being triggered multiple times, you could check the alarm template assigned to the elements used as alarm filter in your correlation rule.
If that's not possible, another option is to adjust the alarm grouping and rule conditions of the correlation rule.
Hope it helps