Speed up an email notification from Event Based Alarms

Question

Hello all,

I am curious is there a way that we can speed up of getting emails being send out to our NOC team for specific and very important 10Gig Interfaces in our DCs.

Currently i am testing this out and on the event it self the Evaluate the trigger condition every is set to 15 sec, but we are getting actually the email notification after 3 min.

We would like to be more sensitive in terms of time and get those email notifications as soon as possible.

Please let me know if there is some way of tuning this?

Jfrazier · Answer

try adding the following to your alert text:

Time of Alert ${Time} ${Date} ${Day}

angel.gramatikov · Answer

How this could be done - adding the timestamp to the event?

Sorry for being noob but usually i don't use SW for some special things except of monitoring our infra this time they asked me to do something more advanced and i stuck here..

Jfrazier · Answer

I would still recommend adding the timestamp to the event.

It will give you a point of reference to the events so if you have multiple events in the same time period (say a 5 minute window) you have an absolute time for that event.  It will also give you MTTI (Mean Time To Innocence) if they say they got the email late...  You handed off the alert and whatever delay was out of your control.  The event timestamp and the email headers will provide that data.

Just as a thing to ponder, you might consider adding a breadcrumb to your alerts so that you can find your way back to the correct alert template if you have several that are very similar...use the alert template name or a short code that you embed in the alert and have also listed in the template name.  Once you have several hundred alerts defined, sometimes going back to find the one that triggered a certain alert needs fine tuning can be challenging.