Forum Discussion

Horace_Cheung's avatar
Horace_Cheung
8 years ago

EventSource alert didn't get cascade cleared in PagerDuty

Hi,

It appears that all alerts generated from eventsources are cleared in 60 mins by default. We had the setup of LogicMonitor -> PagerDuty but the 'cleared' alerts didn't get cascade cleared in PagerDuty. Here are the examples:

1. https://arthrex.logicmonitor.com/santaba/uiv3/alert/index.jsp#detail~id=LME152627&type=eventAlert

2. https://arthrex.logicmonitor.com/santaba/uiv3/alert/index.jsp#detail~id=LME152625&type=eventAlert 

Pls verify and see whether there is a quick way to add this feature to cascade clear in PagerDuty. 

Thanks!

Horace

alerts
  • Annie_Dunham's avatar
    Annie_Dunham
    8 years ago

    Hi Horace - We dug in, and the reason for this is that EventSources are unique in nature.

    Since they auto clear based on time, or based on acknowledgement (coming in v.83), we have not historically sent out clear alerts.  It's not as though the event "un-happened", it's more that it has served its usefulness as an alert.  I understand that makes things tricky when it comes to integrations.  We've seen some people handle this on the integration side.  Another option is to have an alert rule specific for EventSource alerts that closes an incident as part of the Acknowledge payload.

    There are some other options we can explore, but we'd love to hear more about what would work best for you.