I would like the ability to continue to generate alerts (such as email) so long as something exists in a specific state.
An example...
- When I receive a log indicating a service has gone down I set a State Variable called Service Status to "Service Down"
- Another Alert is configured to send an email when Service Status is equal to "Service Down"
- Every 30 minutes the Service Status variable is re-evaluated and if it's still equal to "Service Down" then another email is sent.
This would give me the ability to take logs which are generally regarded as stateless events and turn them into something stateful and continue to alert so long as the state is undesirable.
