Avoid creation of incidents for secondary alerts when an incident already exists for the primary alert.

Aakanksha B
Tera Expert

Hi,

There is a scenario where different Incidents are getting created for Primary alert and associated Secondary alerts. Please suggest how to avoid creation of incidents for secondary alerts when an incident already exists for the primary alert. 

Checked with the below property, It is already enabled on instance.

  • evt_mgmt.avoid_int_enabled

Thankyou.

Aakanksha B

 

1 ACCEPTED SOLUTION

Hi,

Do you have this condition as well:

find_real_file.png

Thanks,
Ashutosh

View solution in original post

12 REPLIES 12

There you go Bingo....

 

Have a nice day ahead.

 

-Ashu

what rule is this?

Komal10
Tera Contributor

What if alert mgmt rules executes first and then correlations happens