Hi community,
I would like to receive notifications on a specific view if I have critical alarms with a severity duration greater than 10 minutes for example.
But I can't add severity duration to my filter.
How do you handle this use case?
Thanks for your help.
Yvan
Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 29th September 2023
Hi Yvan,
With notification, are you referring to email notification? Or to raise an alarm in the alarm console?
Below two possible options:
- Using a correlation rule, you can set a rule condition with a persistent event. Then, you could generate a correlated alarm or an email notification.
- Using hysteresis, you can raise a critical alarm after 10 minutes.
Hope it helps.
Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 29th September 2023
Hi Miguel,
Yes I want to receive an email notification (no need to generate a new alarm).
The idea is to receive an email if a system view (with servers and db monitoring) is in critical alarm for more than X minutes.
My first idea was to check if it’s possible to achieve this with Action/Alert me but it seems it’s not possible. Correlation is probably the best solution.
Thanks