Alert tuning instances that do not yet exist (Regex?) | Archive

Ryan_B · 2017-12-05T19:42:19Z

I am working with the built in Cisco_UCS_FaultTable datasource. This reads in a fault table, and generates instances for each entry in the alert table on the device automatically and sets the severity as an integer. Some of the Cisco set severities are poor, and need to be tuned. I normally would go to the group in LogicMonitor containing the devices, and then go to alert tuning tab, and add a new alert threshold. I cannot do that here, because I do not want to adjust ALL instances that come from the fault table datasource, and I cannot tune alerts on instances that do not exist. I know I could clone the Cisco_UCS_FaultTable datasource, and filter out instances I did not want-- but I want to see them, just adjust whether they create a warning, alert, or critical status. Cloning is also unsustainable as the datasources are no longer linked to upstream. In an ideal world, I could apply tuning at the device group level and use a regex over instances, and say if instance_name ~ license, then set warning (currently licensing issues are considering critical by Cisco). It does not seem this is possible. Has anyone ran into this before?

MoreDiscussions

Alert tuning instances that do not yet exist (Regex?) | Archive | LogicMonitor Community