Alert aggregation by configuring the Alert Aggregation Learner
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2023 03:54 AM
Hey,!
I have come across information regarding "Configure alert aggregation." It explains that alerts can be manually or automatically grouped, and these groupings are learned and stored in the [em_learned_patterns] table. However, in my case, I have enabled the property that requires alerts to be grouped based on the CMDB location. To validate this functionality, I would like to test the [sa_analytics.agg.learner_group_by_property] setting. How to test this? and where is this scheduled job running?
(How and where does this occur)
Kindly educated me regarding this issue..
- Labels:
-
Event Management

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2023 04:37 AM
I assume your service now Instance is getting event data from Monitoring Tools.
Regards
RP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2023 06:28 AM
Yes, it does receive events from Monitoring tools.
Just wanted to know how are the patterns created and how does it look like when the pattern is stored in the {em_learned_patterns] table

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2023 08:26 AM
Can check these Jobs are enabled
Regards
RP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-15-2023 08:55 AM
Yes they are enabled,