How can we help you today? How can we help you today?

Handling alerts that end in a suppression window

How should we handle alerts that are raised before a suppression window but end during one? For example, a CPU utilization alert (low priority but maybe worth looking at) is raised at 5:50 PM, our suppression window kicks in at 6 PM to suppress notifications for all alerts in nonprod groups, and then the CPU usage stops and the alert is closed at 6:30 PM. It just looks like the problem is opened and never closed, particularly to our other, more general monitoring/alerting/outage notification software.

emmar00
0

Comments

1 comment

Sort by
  • Jon Kirkwood
    Official comment

    Hi emmar00, 

     

    Thank you for reaching out on the Redgate forum regarding your Redgate Monitor alert suppression question.

     

    I did some testing today and found the following:

    • It does depend on how you have your suppression window configured as to which alerts are suppressed

      My testing was conducted with all alerts suppressed & alerts and notifications suppressed to cover all scenarios.

     

    Alerts raised before a suppression window but ended during - Alert raised, and an initial alert notification is sent; no notification is issued when the alert has ended.

    The alert is tracked in Monitor and has a status of Ended. 

     

    Alerts raised during and ended during a suppression window - No alert is raised, no alert notifications are sent out

    There is no alert created in Monitor.

     

    Alerts raised during a suppression window and ended after - Alert raised after suppression window and backdated to the computed alert start time. This does not raise an initial alert notification and alert status is set to Active

    An alert is raised and has a status of Active. This may clear automatically, but ideally needs to be manually reviewed and cleared.

     

    In the third situation, as there is no initial notification that the alert is created, it appears to stay in an open/active status so it may be reviewed. 

    A new notification can be manually issued and then checked before it is marked as cleared. 

    This helps verify that any persistent alerts are accounted for after the suppression window has completed.

    Jon Kirkwood

Add comment

Please sign in to leave a comment.