How to estabilish time when event was happen if event's was be consolidated ? In example :
We have Time of start 07:00
Time of first event 07:15
Time of last event 14:00
RepeatCount 12.
I'm trying to understand the question more clearly...
Are you wanting to log each instance of the event to have a timestamp and alert for each event? If this is the case, you'll need to change the alert suppresion. If you ARE suppressing the alert, then you'll get just one consolidated alert until the alert has been resolved either by an operator or by expiring due to it's expiration rule.
If you want to log each event seperately, then you'll need to disable suppression for that alert. Keep in mind that if you disable suppression on an alert that occurs quite often, you will see a HUGE AMOUNT of alerts coming into your MOM Operators Console.
Thanks for clearing up alert suppression Jonathan, I was looking for a better understanding of it and you just gave it to me.
Can you clarify on how MOM sends the alerts? Meaning if alert suppression is ON, and multiple identical events are generated, MOM will only send the notification when the first event is triggered correct? Or will it only send it after its been acknowledged and/or resolved in the ops console?
That's exactly right. I you have alert suppression turned on for a rule, then you'll only receive a single notification to your notification group. And the alert in the MOM Console will only show once, with a running total count of how many times it was encountered.
You must resolve the alert in the console, or have an auto-resolve rule setup, to receive further like alerts.
Remember to configure suppression of a rule to match certain criteria, like servername. Or else you will not receive same alerts from different servers and so on...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.