Automatic Group Filter

Henrik Jutterst
Tera Guru

Trying to override default Alert Grouping, but not sure how this is done. The filter conditions looks a bit odd if you ask me. Is this right or how should I set the filters?

 

HenrikJutterst_0-1667982967035.png

 

Default grouping is based on:

  • Metric Name AND CI Type

Looking to change so that automatic grouping is based on:

  • Metric Name AND Configuration Item, so default is excluded because it's not good enough.

But is the filter in image correct? I just say what fields are not empty. Not saying what fields it should be grouped on... ¯\_(ツ)_/¯

2 REPLIES 2

Robin J_
Tera Guru

Hi Henrik,
The filter looks odd and I agree with you.

Just a thought from me. Since Message Key already should take care of "uniqueness" what about updating the Event Rules which creates the Alerts? So you can correlate Metric Name and CI Name? 

How does yours Message Key look today? 

Maybe this could work?

RobinJ__3-1667998794968.png

If you have many Event Rules then maybe this could be a somewhat pain to update of course.
- Robin

 

Hi there and thanks for the feedback.

I agree with you that one can add logic in Event Rule, but I'm not really sure that will solve the issue. But looking to understand the OOB solution first and foremost.

 

Kind regards

/Henrik