https://community.splunk.com/t5/Share-a-Tip/Health-Rules-Dashboards-Alerts-Oh-My-Quick-Tip/m-p/722355#M44 <P><STRONG>Quick Tip:</STRONG> When creating a health rule that will alert teams, make sure the&nbsp;<STRONG><U>same</U></STRONG>&nbsp;health rule is used in an "eyes-on-screen" dashboard. Do not create 2 different health rules – one for alerting and the other for dashboard viewing.</P> <H2 id="toc-hId--1330506947"><STRONG><FONT size="4">Why?</FONT></STRONG></H2> <P>Over time, health rules will be tweaked and optimized in order to separate the signal from the noise. This constant update to health rules will ensure that the appropriate alerts are being sent. So, if you have two health rules for each (alert and on-screen) then making sure both health rules are synched becomes an enterprise-level maintenance issue.</P> <P>And as anticipated, when the health rules do get out of sync -&gt;</P> <P>the dashboard will show a red status light -&gt; <BR />with no alerts going out to the appropriate teams or&nbsp;<SPAN>vice versa</SPAN></P> <P class="lia-align-right" style="text-align : right;"><FONT size="2" color="#999999"><SPAN>Typographical edits | <BR />Claudia Landivar, Community Manager and Editor</SPAN></FONT></P> Wed, 24 Feb 2021 20:15:46 GMT Aram_Gasparyan 2021-02-24T20:15:46Z https://community.splunk.com/t5/Share-a-Tip/Health-Rules-Dashboards-Alerts-Oh-My-Quick-Tip/m-p/722355#M44 <P><STRONG>Quick Tip:</STRONG> When creating a health rule that will alert teams, make sure the&nbsp;<STRONG><U>same</U></STRONG>&nbsp;health rule is used in an "eyes-on-screen" dashboard. Do not create 2 different health rules – one for alerting and the other for dashboard viewing.</P> <H2 id="toc-hId--1330506947"><STRONG><FONT size="4">Why?</FONT></STRONG></H2> <P>Over time, health rules will be tweaked and optimized in order to separate the signal from the noise. This constant update to health rules will ensure that the appropriate alerts are being sent. So, if you have two health rules for each (alert and on-screen) then making sure both health rules are synched becomes an enterprise-level maintenance issue.</P> <P>And as anticipated, when the health rules do get out of sync -&gt;</P> <P>the dashboard will show a red status light -&gt; <BR />with no alerts going out to the appropriate teams or&nbsp;<SPAN>vice versa</SPAN></P> <P class="lia-align-right" style="text-align : right;"><FONT size="2" color="#999999"><SPAN>Typographical edits | <BR />Claudia Landivar, Community Manager and Editor</SPAN></FONT></P> Wed, 24 Feb 2021 20:15:46 GMT https://community.splunk.com/t5/Share-a-Tip/Health-Rules-Dashboards-Alerts-Oh-My-Quick-Tip/m-p/722355#M44 Aram_Gasparyan 2021-02-24T20:15:46Z