Forum Discussion

Vitor_Santos's avatar
Vitor_Santos
Icon for Advisor rankAdvisor
4 years ago

External tool - CLEAR events not being sent when disabling instance/deleting resources

Hello, 

We've been noticing sometimes when deleting a resource (that has open alarms - previously sent to our SNOW ITOM via integration), CLEAR event(s) - for the respective alarms aren't sent.
The same happens with instances that we disable for example.

This behavior often leads to stuff filtered on LM but, alarms still open on SNOW. We've started to disable alarming first & only then delete/filter. However, it would be nice if LM had some kind of mechanism that would detect present alarms for the resource/instance in question & send a CLEAR event automatically upon deletion of those.

I believe this would avoid the end-user missing the 'disable alarming' step prior to the deletion & ease our job a lot (since we're in a constant filter/removal of stuff).

Thanks!

  • FrankG's avatar
    FrankG
    3 years ago

    We're building a work around in our incident management system for this exact problem.  If a system is deleted (permanently) it should first mark all events as cleared and this should happen automagically from the LM side methinks.

    Upvote from me.

  • azia1's avatar
    azia1
    4 years ago

    OH ya this problem does exist.

    Would be great if there was an option that allowed auto-resolve in SNOW on instance/resource deletion (maybe on the group level using a property?)
     

    Currently we handle the orphaned tickets by running a daily script that resolves the ticket, when there are tickets that are open in SNOW on instances/resources that dont exist in LM.

    As we are a large MSP, this happens in the hundreds daily

     

    However if this solution is added it would be one less script running that does bulk admin cleanup. As much as that script helps, it leaves a path for messups,.

  • Vitor_Santos's avatar
    Vitor_Santos
    Icon for Advisor rankAdvisor
    4 years ago

    Yeah as an MSP, this represents a struggle as well.

    Since we've a team to handle LM removals/filters. The instruction is to stop alarming prior to removal... This clears anything present for the resource in question.

    But yeah, it would be nice to have it built-in.

  • Vitor_Santos's avatar
    Vitor_Santos
    Icon for Advisor rankAdvisor
    3 years ago
    On 1/28/2022 at 1:04 PM, FrankG said:

    We're building a work around in our incident management system for this exact problem.  If a system is deleted (permanently) it should first mark all events as cleared and this should happen automagically from the LM side methinks.

    Upvote from me.


    Yeah, that's exactly what should happen & the reason why I've started this topic...