KBI 311315 Issue Addressed: Escalation Might Continue To Fire While The Main Alert Is Suppressed Because Of Relator Option Fire Alert Once Every XX Hours XX Minutes
Version
Argent Advanced Technology 3.1A-1510-A and earlier
Date
Tuesday, 24 November 2015
Summary
Customer could configure a Relator to execute Rule with option ‘Post Event Even The Same Event Is Still Outstanding’ in order to be alerted even the Event has not been answered
However, the option may cause too many fired Alerts especially if the Relator is scheduled to run frequently
To suppress the Alert, customer can use the Relator option ‘Fire Alert Once Every XX Hours XX Minutes’
If the Relator has escalations defined, though the main Alert is fired every xx hours xx minutes as specified, the escalation is still scheduled every time the Rule is found broken
As a result, if the condition persists for a long time, after the escalation for the first Alert is fired, escalations continue to fire in the Relator scheduling interval, though the correspondent Alert has been suppressed
The issue has been addressed in Argent AT 3.1A-1510-T9
Technical Background
When Relator option ‘Fire Alert Once Every XX Hours XX Minutes’ is used, the Alert can be suppressed while the Event record is still added to Argent Console
In order to implement Event auto correction which relies on the escalation mechanism, the escalation was always scheduled
The enhanced code adjusts the escalations depending on the whether the main Alert is fired
If it is suppressed, only the escalation for auto correction will be scheduled
Resolution
Upgrade to Argent Advanced Technology 3.1A-1510-T9 or later