Event Management - How to manage clear events coming into Em_ event table

[Madhan27]

Hi community,

We are receiving only clear events from a monitoring tool, without any corresponding open events. The tool is sending clears directly, and no alerts are being generated.

My question is: is there any rule or configuration in Event Management that can prevent clear events from being processed when no matching open event exists?

TIA

[sandeepdutt]

Hi @Madhan27 ,

Unfortunately, there is no OOTB configuration available.

What you can try doing is , writing a Event rule (scripted), which will actually tackle these kind of ebents from being processed.

[Madhan27]

@sandeepdutt Thank you for your response, The closed events are not processing into alerts. They are just coming into em_event table and sitting. I don't want that noise to be there in event table. that is why I am looking for an solution is there any way that we can control that noise. 

[Jeffreys Quinti]

Hi,

you can probably use a push connector script to filter these type of events. Send the events to the push connector URL that has the specific script that ignore these type of events.

Hope it helps