12 years ago
Collapse similar alerts into one alert email
Hi,
If you get 10s or 100s of error events in the Windows event log within a short period that are similar in either event id and or event text then you generally get multiple alerts and alert emails, even taking into account rate limiting.
Can you consider a feature where you can specify an alert or event pattern with a period of x minutes or x hours, so if events or alerts matches the pattern then only 1 alert email is generated for all of the events in the specified period. The pattern can be one or combinations of event id, data source, event/alert text or string match.
thanks
Rob