Collect vs. Discard.
I have a sensor that is monitoring a router interface connected to a broadband circuit. I want to collect data all hours. I only want to alert during business hours.
I don't want an alert in the middle of the night when the ISP performs maintenance.
I do want an alert if the interface goes down in the middle of the night and it is still down at 8:00 am when business opens.
I have a business hours schedule applied to the notification template.
If I use collect notification while paused, at 8:00 am I get an alert that the interface when down after hours whether it came back up or not.
If I use the Discard while paused, at 8:00 am I do not get an alert if the interface went Down and Back up, and I do not get an alert if the interface went down after hours, and never came back up.
Is there some combination of 'Notification Handling During Paused' and 'Notification Summarization' that would discard over night and then alert if still down when the notification template un-pauses.
or
a way to queue the alert and clear the alert if it comes back up before un-paused.
additional info, there is a second alert that monitors over night if more than one interface goes down to alert an oncall tech.
Add comment