Suppressing resolved actions?

Hi paelcolp,

It would help me to understand how you have your setting setup if you could send me some screenshots of those settings for your Ping monitor. Please include the Ping Monitor config, Advanced Option of the Ping Monitor, and Action menu showing the actions that are added.

Please send them to support@poweradmin.com

Thanks
Quinn

Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer.

Thanks - emailed over the screenshots. Will update this post with results if we get it figured out so others will know how to do it.

Hi paelcolp,

Looking at your settings I think you have a race condition going on. You are using both the Event Escalation for sending of the email and the Alert Suppression.

Say the monitor gets a ping that exceeds the limit, your current config will be put the monitor into "Suppressed Alert" mode, based on the

Alert Suppression settings. The status of the monitor will stay that way until the 10 minutes are over. Meanwhile, no clock has been started for when the email action is fired.

Now the monitor has passed the suppression time of 10 minutes. That changes the monitor's status to "Alert", which causes any actions to fire. However, the settings say don't fire any actions until after the monitor has been in Alert mode for 10 minutes after the first alert. That means your getting email alerts 20 minutes after the monitor sees the first problem.

Now say the monitor goes back to an "OK" status after 14 minutes that causes the Resolved Action to be fired. There have not been any Alert Actions fired yet.

You can use either of the

Event Escalation or Alert Suppression options. If you use just the Event Escalation, your monitor will be in Alert mode for 10 minutes before any emails are sent. If you use Alert Suppression, the monitor will not go into Alert mode until 10 minutes have passed. My suggestion would be to use the Alert Suppression and then set your Action

Event Escalation to fire immediately, and if you want to fire every 10 minutes after that. Or any other time you would like.

Try my suggestion and then tweak your settings it to fit your needs.

Thanks
Quinn

Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer.

OK this is finally sorted out. What fixed it was having the settings under Advanced Options --> Alert Suppression --> Only fire alerts after the monitor has detected an error for x minutes. I set that, and then on the Actions area for the alert I set it to do immediately. This has stopped my phantom resolve actions from happening and I'm getting my actual alerts after the suppression period (and my resolve actions when they clear).

Thanks Quinn for the help!