We have a centralized event manager that takes alerts from any monitoring system normalizes them and creates tickets or on-call notifications. This data is also stored in a database so we can run reports on outage history. To do this we trigger a script for each message that comes in matching the proper criteria. I have run into an issue with fan failed alerts being sent every minute from the device with the failed fan. The thing is the network support team cannot always resolve the failed fan issue until the scheduled maintenance window. With regular NPM advanced alerts I would just add an alert suppression for that device until the scheduled maintenance window has passed. That way I would not get a large quantity of messages in our database and worse would not have created a ticket every minute until it was resolved (I am guessing they Network team would not like me much if I kept doing that). I do not see any way to accomplish the same thing with the NPM syslog receiver.
Now that I wrote a much too long post, am I missing something? Is there another way to accomplish the same goal?
