KBI 311315 Issue Addressed: Escalation Might Continue To Fire While The Main Alert Is Suppressed Because Of Relator Option Fire Alert Once Every XX Hours XX Minutes


Argent Advanced Technology 3.1A-1510-A and earlier


Tuesday, 24 November 2015


Customer could configure a Relator to execute Rule with option ‘Post Event Even The Same Event Is Still Outstanding’ in order to be alerted even the Event has not been answered

However, the option may cause too many fired Alerts especially if the Relator is scheduled to run frequently

To suppress the Alert, customer can use the Relator option ‘Fire Alert Once Every XX Hours XX Minutes’

If the Relator has escalations defined, though the main Alert is fired every xx hours xx minutes as specified, the escalation is still scheduled every time the Rule is found broken

As a result, if the condition persists for a long time, after the escalation for the first Alert is fired, escalations continue to fire in the Relator scheduling interval, though the correspondent Alert has been suppressed

The issue has been addressed in Argent AT 3.1A-1510-T9

Technical Background

When Relator option ‘Fire Alert Once Every XX Hours XX Minutes’ is used, the Alert can be suppressed while the Event record is still added to Argent Console

In order to implement Event auto correction which relies on the escalation mechanism, the escalation was always scheduled

The enhanced code adjusts the escalations depending on the whether the main Alert is fired

If it is suppressed, only the escalation for auto correction will be scheduled


Upgrade to Argent Advanced Technology 3.1A-1510-T9 or later