Forum Discussion

omarhegazy's avatar
omarhegazy
Icon for Neophyte rankNeophyte
2 months ago

LogUsage data source

Hello, We are having all our devices sending syslog to LM collector. Via LogUsage data source, we can monitor if the device sends syslog data or no. But the threshold to alarm on that is only 60 min...
syslog
Justin_Lanoue's avatar
Justin_Lanoue
Icon for Advisor rankAdvisor
2 months ago

Your best built-in option is to create an alert rule that auto-escalates every 1440 minutes targeting the LogUsage datasource.

You would then target the alert rule to that does nothing on Stage 1 and Stage 2 and then on Stage 3 creates your a ticket.

Let me know if that works for you :)

  • Justin_Lanoue's avatar
    Justin_Lanoue
    Icon for Advisor rankAdvisor
    2 months ago

    ou would then target the alert rule to an escalation chain* that does nothing on Stage 1 and Stage 2 and then on Stage 3 creates your a ticket.