This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

How to handle event storms

Hello,

Have a question about suppressing alerts after they already happened.

For example, when a switch goes down, we get multiple alerts coming in for each device that lost connectivity. This is to be expected since we have alarms already setup for up/down of the connected devices and the switch itself.

The problem is, when the switch goes down, all the "child" alerts are sent out as well.

Is there a trigger/way to modify the alerts to be suppressed based on existing alerts ? (basically, if the switch alert is present, suppress children alarm.

Thanks!