|
I have alerting set up for a ping monitor and only have it set to fire an alert if it's been down 10 minutes. This works great - however I have actions set up to tell me when alerts are resolved. I don't see a way to suppress these like I can the alert. Is there a way to do this? So what's happening is I'm getting "resolved" emails for the alerts that happen within that 10 minute threshold that I set above. I'd really like to only get the resolved email if the alert was a real alert ("real" in my case is it was in error for 10 minutes). Thanks in advance. I'm running v8.2.2.1. |
|
Hi paelcolp, Looking at your settings I think you have a race condition going on. You are using both the Event Escalation for sending of the email and the Alert Suppression. Say the monitor gets a ping that exceeds the limit, your current config will be put the monitor into "Suppressed Alert" mode, based on the Alert Suppression settings. The status of the monitor will stay that way until the 10 minutes are over. Meanwhile, no clock has been started for when the email action is fired. Now the monitor has passed the suppression time of 10 minutes. That changes the monitor's status to "Alert", which causes any actions to fire. However, the settings say don't fire any actions until after the monitor has been in Alert mode for 10 minutes after the first alert. That means your getting email alerts 20 minutes after the monitor sees the first problem. Now say the monitor goes back to an "OK" status after 14 minutes that causes the Resolved Action to be fired. There have not been any Alert Actions fired yet. You can use either of the Event Escalation or Alert Suppression options. If you use just the Event Escalation, your monitor will be in Alert mode for 10 minutes before any emails are sent. If you use Alert Suppression, the monitor will not go into Alert mode until 10 minutes have passed. My suggestion would be to use the Alert Suppression and then set your Action Event Escalation to fire immediately, and if you want to fire every 10 minutes after that. Or any other time you would like. Try my suggestion and then tweak your settings it to fit your needs. Thanks Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer. |
|
Hi paelcolp, It would help me to understand how you have your setting setup if you could send me some screenshots of those settings for your Ping monitor. Please include the Ping Monitor config, Advanced Option of the Ping Monitor, and Action menu showing the actions that are added. Please send them to support@poweradmin.com Thanks Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer. |
|
OK this is finally sorted out. What fixed it was having the settings under Advanced Options --> Alert Suppression --> Only fire alerts after the monitor has detected an error for x minutes. I set that, and then on the Actions area for the alert I set it to do immediately. This has stopped my phantom resolve actions from happening and I'm getting my actual alerts after the suppression period (and my resolve actions when they clear). Thanks Quinn for the help! |