We have numerous alerts from node up/down to interface up/down, etc.
What I now need to do, is find a way to create a new alert or edit these alerts so as to exclude or include certain nodes. I imagine a custom property is the best way, but I'm trying to avoid editing 30+ alerts to exclude this CP whilst at the same time creating a new alert for these excluded nodes.
Here's the detail.
Traditionally we have been a data only team, but with automation, reduction on staff numbers, etc, etc we are having to (like most I guess) broaden our scope. So one of those scopes is voice. At this stage we still have a separate voice team, so for the few nodes we add, we want to have the alerts (node and interface only at this stage) go to the voice team via an eMail.
Currently all our alerts essentially are based on the following principle:
- is it in BAU (business as usual - IOW, handed over for day to day support)
e.g. 
So, going forward, what would be your suggested and/or best approach to now having voice alerts included in this principle but where their triggered action is completely different to the data ones? As we clearly want:
- data alerts to carry on as is but not include voice and
- voice alerts to go elsewhere
In my head I'm thinking CP and two new alerts for voice (node and interface) - but that would still mean I have to edit 30+ alerts to exclude that CP.
So my other thought was to extend the Node IN BAU CP (somehow) from true/false to true/false/voice and then set the new alert logic to be is node_in_bau = voice. The issue here is that this CP is a Yes/No answer, and would mess with various reports as well as alerts
Your thoughts please?