help with alert throttling needed

damucka — Wed, 30 Sep 2020 05:35:26 GMT

Hello,

I have the alert that produces the table as an output, let us say that it looks as follows:

SYSSID, HOST, EMAIL
BWP, h1, email_list_1
BWP, h1, email_list_2

Now, I would like that two separate alerts get triggered, one for the row1 and second for the row2, the idea is that they are then sent to separate email recipients.
Now, what I did what to use throttling per result with the following settings for "Suppress results containing field value
":
$result.SYSSID$, $result.HOST$, $result.EMAIL$

What I would expect from that is that I get two separate alerts triggered (per result) and they both get suspended for the given time (15 min). Unfortunately I am not able to get it working. What happens is that only the first row is "seen" when processing the alert and correspondingly I get only one alert triggered, which is wrong.

Could you please help?

Kind Regards,
Kamil

Re: help with alert throttling needed

493669 — Tue, 02 Jun 2020 10:51:58 GMT

Try entering direct fieldname in "Suppress results containing field value" box-

SYSSID,HOST,EMAIL

Re: help with alert throttling needed

damucka — Wed, 03 Jun 2020 04:34:58 GMT

Thank you, it worked.

Re: help with alert throttling needed

493669 — Wed, 03 Jun 2020 04:37:52 GMT

I am converting my comment to an answer please accept and upvote if it helps. 🙂

topic Re: help with alert throttling needed in Alerting

help with alert throttling needed

Re: help with alert throttling needed

Re: help with alert throttling needed

Re: help with alert throttling needed