Advanced Alert Management - My Arch Nemesis

I think I have a similar situation but I could see this getting really complex if the conditions get more complicated than what I have. Here's what I do:

If I understand correctly, you have this situation presently:

Alert 1: ANY app goes down. Action: Notify NOC team

Alert 2: App A goes down. Action: Notify Team A

Alert 3: App B goes down. Action: Notify Team B

What I do looks like this:

Alert 1: ANY app goes down. Action: Notify NOC team. Supress if App= App A, B

Alert 2: App A goes down. Action: Notify Team A AND NOC team.

Alert 3: App B goes down. Action: Notify Team A AND NOC team

etc.

As long as you have only one team per app plus the NOC team, this is pretty straightforward, just add another suppression condition to the first alert every time you add a new specific app alert.

Thanks, this is a good solution, probably the best I will get.

Unfortunately as things grow I expect to have somewhere in the realm of 50-100 apps at which point this may be a bit of a mess.

Another option would be to be able to setup views of with subsets of the active Alerts, rather than just All Active Alerts.

I think I have a similar situation but I could see this getting really complex if the conditions get more complicated than what I have. Here's what I do: If I understand correctly, you have this situation presently: Alert 1: ANY app goes down. Action: Notify NOC team Alert 2: App A goes down. Action: Notify Team A Alert 3: App B goes down. Action: Notify Team B What I do looks like this: Alert 1: ANY app goes down. Action: Notify NOC team. Supress if App= App A, B Alert 2: App A goes down. Action: Notify Team A AND NOC team. Alert 3: App B goes down. Action: Notify Team A AND NOC team etc. As long as you have only one team per app plus the NOC team, this is pretty straightforward, just add another suppression condition to the first alert every time you add a new specific app alert.

As an important note, you don't actually want to use the suppress tab in this case as if you do you will not receive any alerts to the NOC team for anything so long as App A and/or B is down.  Instead you need to build this into the alert criteria.