Sometimes a issue occurs and a alert is sent: great.
But sometimes it is a known temporary issue (let’s say 1 month) and I would like to manually set this status as “known”, “acknowledgement” and stop it for send my email periodically. There is the option “quiet” to mute it or use “set standby”, but I would like that, when the status change and the issue has been solved Pandora shoukd automatically restart in sending alert for that specific agent.
This feature allows three important things:
- stop annoying me with periodical alert related to a known issue
- automatically notify me when the issue has been solved (status changed)
- automatically stop the “quiet” and turn off the “acknowledgement” status and restore the original configuration on that agent
Is there this feature in Pandora FMS?
Or any workaround to do this?
Thanks.
Simone
Hi,
This functionality already exists in Pandora FMS, for that there are the Alert template configurations, where you can define the following:
Time Threshold
Time required to reset the alarm counter. It defines the time interval where it is guaranteed that an alert will not be triggered more than the maximum number of alerts. After the defined interval, the counter will be reset. The restart of the trigger counter will not be restarted if the alert recovers when a correct value arrives, unless the value Alert recovery is activated, in which case the counter will restart immediately after receiving a correct value.
Min number of alerts
The minimum number of times the terms set on the template have to be met (counting from the number defined in the module’s FlipFlop parameter) so that an alert is triggered. The default value is ‘0’, which means the alert will be triggered when the first value that meets the terms is received. It is intended to work as a filter, which might be useful to ignore false positives.
Max number of alerts
Maximum number of alerts which could be sent consecutively within the same time interval (time threshold). It is the maximum alert counter value. No more alerts than the specified number will be received by interval.
Best regards,
Víc.
Thanks for your reply.
Those parameters are “complicated” and I do not know in advance how many alerts and time threshold. In addition those alert already belong to an Alert template, so if I change template settings, those changes will be applied to all other alarms which use the same template, and that is not useful.
If I would create a new Alarm templete to assign it to target issue, it is a littel bit complecated and requires to re.apply the original template when the issue will be solved.I would like a easier way to pause it till it is restored; currently there are those options: “disable” alert and “stanby” alert; I would like something as “acknolegement” alert option, easy and without parameters