Hi All.

I wanted to create a filter using severity duration; however, this isn't available as a filter.

I looked at other solutions from previous questions, ranging from creating a GQI to correlation rules.

I thought about using a correlation rule using an alarm filter we use on Unacknowledged alarms and then applying a Rule based on the "Property.Alarm.AcknowledgeMotivation" "Not=To" Normal operation, With an Action "Persistent Event" for longer than 30 minutes.  Based on those conditions I was going to execute a script to "Generate a Warning in the Banner" to let the NOC know there are alarms requiring attention greater than 30 mins.

Writing a script looked easy until I couldn't work out the correct type or namespace.

Firstly, Is this possible?

Is there another way to highlight alarms that have not been acknowledged in a timely fashion, e.g. 30 minutes?