Only raise a alert if X amount of nodes are down

[George18]

Hi,

Here is my use case.

We are monitoring our Citrix farm.

In the farm we have a lot of nodes.

We only want to generate an alert if: we have multiple events from the same monitor and it has a different node.

example: Event: Citrix node unavailable, where node is A If we have 10 events of Type Citrix node unavailable and the value of the field node is always different we want to treat the event as an alert and open an incident.

How can this be performed?

Thank you

[Rahul Priyadars]

Hi George

A simple Use Case i tried in Past with some Variation where one Alert was Primary and Subsequent Alerts (Secondary) were attached to Primary . In this case only one Incident was Raised (For Primary Only). It was done using Alert Correlation. 

10 Event --10 Alerts - 1 Primary Alert (9 Attached to it)--1 Incident

But Seems in ur case I see let 10 event come Validate metric is Same But Node is different and then Spin Only 1 Alert and 1 Incident. This may take lot of Customization. Just my high level view.

Regards

RP