Page History

...

The processing of exception events using events correlation engine is listed below (we will use the example with the server):

1. Active monitoring system alerts throws an alert "server is unreachable";
2. On SimpleOne instance, in accordance with the settings specified, the Exception event was created, identical to the alert and having Active status;
3. The Debounce engine has started to work, and the specified period should pass before any actions can be undertaken (for example, three minutes).
4. Checking the status of the event associated with this alert (the monitoring system updates alert statuses, and the event statuses synchronize with them):
   1. If the event status is still Active - raise the Incident immediately;
   2. If the event status has changed to Inactive, then the Incident will not be raised.

...

The processing of warning events using events correlation engine is listed below (we will use the example with the disk space):

1. Active monitoring system alerts system throws an alert "disk space is running out, X Mb left".
2. On SimpleOne instance, in accordance with the settings specified, the Warning event was created, identical to the alert and having Active status;
3. As opposed to the Exception events, we do not launch the Debounce engine and do not start a countdown. In accordance with the settings specified, to launch the Debounce engine, there must be two active Warning events for this alert.
4. If the second Warning event was received, then the Debounce engine launches and the specified period should pass before any actions can be undertaken.
5. Checking the status of the events associated with this alert (the monitoring system updates alert statuses, and the event statuses synchronize with them):
   1. If all the events are still Active - raise the Incident immediately;
   2. If at least one event is Inactive, then the Incident will not be raised.

...