Forum Discussion

Steve_Slaviero's avatar
Steve_Slaviero
10 years ago

Cascade Alerting

I was chatting with one of Logic Monitors support team about how not to get spammed with alerting when one of our satellite offices loses internet connectivity.

I\'ll try to give an example - one of our offices is in Africa and doesn\'t have the most stable internet connection in the world.

It has the bare minimum there for our staff working there - Firewall, DC Server, switch, couple of AP\'s.

We have a collector installed on the DC there, fail over is set to a collector in our main office.

I\'m planning on setting up 3 alerting rules - Firewall (priority =10), Server (priority = 15) Network switches and AP\'s (priority =20)

If the internet connection drops obviously all the alerts will be triggered, as the connector cannot reach the internet - but in reality the Firewall, Server, switch and AP\'s are still up.

I don\'t want my team to be spammed with multiple alerts, when 9 times out of 10 the problem is the internet connection, so would only want my team to check if they can access the firewall and action accordingly (reach out to office manager make sure not a power issue, contact ISP, etc.).

Ideally, I would want want to suppress the Server and Network rules when a Firewall rule is triggered. Then if there was an issue with the server and the firewall is still up, then a alert would then be triggered accordingly.

I hope the above make sense and can be implemented into a future release as it would be a worth while feature.

Thanks,

Steve

  • Antony_Hawkins's avatar
    Antony_Hawkins
    Icon for Employee rankEmployee
    10 years ago

    Hi Steve,rnAs a workaround in the meantime, if Ive understood your needs correctly, you could set your Africa collector to *not* fail over to your main office. If the Africa office loses internet connection, you would get a collector down alert for that collector, which would suppress the various alerts from the devices there - i.e. youd just get one alert, which you could route to an appropriate escalation chain. The recipients would know (as youd have told them) that this alert may be a genuine collector down or may also be a loss of connectivity, so could make the necessary checks.rnHope this helps.rnAntony