Forum Discussion

Matt_Whitney's avatar
1 month ago

LM Logs alerts and SDT

We recently found out that when we set SDT via email from a log-based alert configured in LM Logs, the SDT does not behave as expected.

If we respond to an alert email to set SDT, it ends up getting applied to the entire log pipeline for that device. So if any other log-based alert triggers on that device from that pipeline, it will also be suppressed. That seems like a poor design choice.

My request is that the SDT be applied to the specific log condition, not every log condition in the pipeline. This would be consistent with how datasource SDT works, where if we set SDT via email it applies SDT only to the alerting instance, instead of every instance of that datasource.

No RepliesBe the first to reply