In Alert Catcher, actions are needed to manage the creation of problems based on incidents coming from third party systems. When acritical time or number of incidents is reached, another issue (in Alert Catcher such tasks are called problems) will be created that is associated with existing incidents. |
To create an action for a rule, go to the list of your connection rules. On the rule line click on theEditlink.
You can specify all parameters to create the problem:
Our system received 7 events with the ruleLack of free swap spacein connectionZabbix.
Indeed, since we have created more than 5 incidents in a shorter period of time than 10 minutes, there was a problem.
By using post-functions, you can set up the workflow so that when your problems are closed, all related incidents close automatically.