After Hours Alert Suppression

marine1020

I have setup 3 types of alerts because I have 3 different SLAs.

1) Business hours mon-fri, alerting-after a resource has been unavailable for 5 mins to send emails to the appropriate support groups. This allows for reboots and false postivies in alerting.

2) After hours-Between the hours of 6pm and 7 am , emails will go out when resource has been available for 30 mins. This give our MPLS provider some flexibility when doing after hour maintenance without notifying us first.

3) Weekends - Same as # 2 but all day/ all night

My issue is when a resource has gone down during business hours and we are working on it, but it then reaches  after hours and my #2 alert triggers. Is there a way to suppress the #2 alert if the #1 alert has been acknowledged? Or is my only choice to unmanage the resource until it comes back up?

macnugetz

marine1020,

What you're describing sounds like you want to create a dependency between alerts 1 and 2.  This is typically done through the use of custom properties, for which there are many posts here on thwack describing how other customers have used custom properties to create alert dependencies.

Would you mind posting some screenshots of your alert configuration in the Alert Manager?

-Craig