Hi All,
We have created a custom rule for voice devices with below condition in it excluding few traps , but still receiving the alerts in Servicenow.
Need help here
@vandu what is the action for this rule you are creating? where does it fall in the processing order? as an example if this rule you are creating is designed to dump the trap or stop processing against any hits for the rule, it would need to be above any rule that is designed to trigger an alert of some kind. If it is below then the rules above it will still process in order and this rule would trigger after the rule to trigger an alert action.
So I don't know what you do want to alert on, but screen reads "I want to entries from 3 IPs, and any message"
Since you have 3 "Does not start with" conditions linked by or, I think anything meets that criteria. Does that match what you are seeing? Tell me what you want to include/exclude if you help adjusting that part.
Hi ,
Thanks for the reply.
I need to exclude the ones with message that display the above ones ( with Trap message) for the above mentioned 3 IP's.
Anyone could you please help on this
Any suggestion please
I would suggest to change "Does not start with" to "Does not contain" if it doesn't help then try to change "Message" to "Trap Type".
Do you have an example of a trap that should trigger the alert?
We tried changing the Does not start with" to "Does not contain" and "Message" to "Trap Type".
Still issue is not fixed
Currently we don't have any such trap , if we receive any I can post here.
Any suggestions/updates please?
Any suggestions/update please?
Action rule is : Processing rule is equal to Custom value P3-SBC Trap ( Custom rule)
Processing order
the rule is second in the list from top.
@vandu, what is the action? does it discard, stop additional processing? What is defined on this section of the rule, if you want it to drop the trap and then stop processing additional rules you must define that here.
It's number two on your list, but what is number one? Is the rule above it the one that is designed to trigger the alert you don't want it to?
It might be easier to help you if you post a screenshot of your custom rules.