| Author |
Message |
Core
Guest
|
Posted:
Mon Sep 05, 2005 12:51 pm Post subject:
Escalation based on "Repeat count" |
|
|
Hi
How do I implement escalation?
I have a rule that generated an Alerts, I tried to use "$Repeat Count$" in
CustomField #1 when the Alert is generated.
I then have an Alert rule that have :
Custom Field1 is more than '10'
But the Alert rule is never fired?
MOM 2004 with SP1 and all Agents running 5.0.2911.0
Thanks |
|
| Back to top |
|
 |
Martijn C
Guest
|
Posted:
Tue Sep 06, 2005 12:51 pm Post subject:
Re: Escalation based on "Repeat count" |
|
|
The above described solution will not work. Unfortunately you can't
select the repeat count directly in the alert rule.
Something I haven't tested, but what should work is this:
Create an alert rule with a response "Update state variable" and choose
to increment CustomField1. This should run on every repeated occurance.
Create an other alert rule that looks for CustomField1 and fires the
response you want when it is larger than something.
As CustomFiled1 is a text field it might not work...
Good luck!
Regards,
Martijn. |
|
| Back to top |
|
 |
Core
Guest
|
Posted:
Wed Sep 07, 2005 12:52 am Post subject:
Re: Escalation based on "Repeat count" |
|
|
Hi Martijn,
I tried all kind of different combinations, but must be missing something
basic some where - things like you mentioned (Update state variable), but I
still don't seems to be doing it right.
A walk through would be appreciated.
My goal :
My application is creating an "Error" in the eventlog, and keeps doing it
until the "problem" is solved - poll rate is 1 minute, giving 60 "errors"
1. First time = Warning Alert and email
2. "Errors" for 1 hour = Error Alert and Custom email #1
3. "Errors" for 2 hours = Critical Alert and Custom email #2
So the incident is escalated to different groups and content.
Thanks again :) |
|
| Back to top |
|
 |
Bryan D.
Guest
|
Posted:
Wed Sep 07, 2005 12:52 am Post subject:
Re: Escalation based on "Repeat count" |
|
|
This is EXACTLY what I am looking at implementing in our MOM
setup...escalation to different notification groups based on the length of
time an alert is in an unresolved or unacknowledged state.
PLEASE someone help us here!
"Core" wrote:
| Quote: | Hi Martijn,
I tried all kind of different combinations, but must be missing something
basic some where - things like you mentioned (Update state variable), but I
still don't seems to be doing it right.
A walk through would be appreciated.
My goal :
My application is creating an "Error" in the eventlog, and keeps doing it
until the "problem" is solved - poll rate is 1 minute, giving 60 "errors"
1. First time = Warning Alert and email
2. "Errors" for 1 hour = Error Alert and Custom email #1
3. "Errors" for 2 hours = Critical Alert and Custom email #2
So the incident is escalated to different groups and content.
Thanks again :)
|
|
|
| Back to top |
|
 |
Core
Guest
|
Posted:
Fri Nov 04, 2005 1:50 pm Post subject:
Re: Escalation based on "Repeat count" |
|
|
Bryan,
Did you find a solution for the escalation problem?
Thanks
Core
"Bryan D." wrote:
| Quote: | This is EXACTLY what I am looking at implementing in our MOM
setup...escalation to different notification groups based on the length of
time an alert is in an unresolved or unacknowledged state.
PLEASE someone help us here!
"Core" wrote:
Hi Martijn,
I tried all kind of different combinations, but must be missing something
basic some where - things like you mentioned (Update state variable), but I
still don't seems to be doing it right.
A walk through would be appreciated.
My goal :
My application is creating an "Error" in the eventlog, and keeps doing it
until the "problem" is solved - poll rate is 1 minute, giving 60 "errors"
1. First time = Warning Alert and email
2. "Errors" for 1 hour = Error Alert and Custom email #1
3. "Errors" for 2 hours = Critical Alert and Custom email #2
So the incident is escalated to different groups and content.
Thanks again :)
|
|
|
| Back to top |
|
 |
Bryan D.
Guest
|
Posted:
Fri Nov 04, 2005 5:51 pm Post subject:
Re: Escalation based on "Repeat count" |
|
|
No, not yet. I was hoping someone might be able to provide us with a
walkthrough or point us in the direction of one.
"Core" wrote:
| Quote: | Bryan,
Did you find a solution for the escalation problem?
Thanks
Core
"Bryan D." wrote:
This is EXACTLY what I am looking at implementing in our MOM
setup...escalation to different notification groups based on the length of
time an alert is in an unresolved or unacknowledged state.
PLEASE someone help us here!
"Core" wrote:
Hi Martijn,
I tried all kind of different combinations, but must be missing something
basic some where - things like you mentioned (Update state variable), but I
still don't seems to be doing it right.
A walk through would be appreciated.
My goal :
My application is creating an "Error" in the eventlog, and keeps doing it
until the "problem" is solved - poll rate is 1 minute, giving 60 "errors"
1. First time = Warning Alert and email
2. "Errors" for 1 hour = Error Alert and Custom email #1
3. "Errors" for 2 hours = Critical Alert and Custom email #2
So the incident is escalated to different groups and content.
Thanks again :)
|
|
|
| Back to top |
|
 |
|
|
|
|