topic Re: Davis® Anomaly Detection -Manual suppress problem, Open a new one if issue still exist in Alerting

Davis® Anomaly Detection -Manual suppress problem, Open a new one if issue still exist

Sachinpai — Mon, 23 Sep 2024 20:40:24 GMT

We created static threshold anomaly detector event using new named "App Davis® Anomaly Detection". We are successfully able to create problem if DQL result violate threshold. Our query is if problem is manually closed, and issue still exist then new problem is not opening. We tried option of adding property dt.event.suppress_problem false in the event property but still didn't open new problem. is there a way this can be done?

Re: Davis® Anomaly Detection -Manual suppress problem, Open a new one if issue still exist

Maheedhar_T — Thu, 03 Oct 2024 19:04:27 GMT

Hi @Sachinpai ,
Not sure why you want a problem to open when you have closed it manually. Davis wouldn't do that when it Identifies a problem let's say you consider error when a certain log record occurs more than 100 times in an hour then Davis creates problem based on the "Static Threshold" that you have created. Once it crosses 100 unless it comes down and goes up again it is the same problem. When you close it manually Davis understands that you want to ignore this issue or you have done something that will resolve this eventually.

All the theory aside, if you really want this to happen I suggest to use workflows and combine it with events API to create problems manually. Do remember to add this tag as property

dt.event.allow_frequent_issue_detection:false

This allows davis not to suppress problems even when they occur frequently. This may or may not work on Davis Anomaly Detector App.

Re: Davis® Anomaly Detection -Manual suppress problem, Open a new one if issue still exist

Peter_Youssef — Sun, 13 Oct 2024 19:11:59 GMT

Hello @Sachinpai

Thanks for sharing your concern.

Kindly find the attached resources to figure out the full picture regarding the correlation between Davis && Anomaly detection ,.. etc:

Simply:

If you close the problem manually, So Davis AI will understand that the problem was triggered for threshold violation and the intended admin ignores this issue for the provided reason in the comment section.
If the problem is opened, the new events will be added automatically to the current opened problem.
Dynatrace won't raise a problem alert for the entity that impacted by the frequent issue, but you will be able to see the section of the frequent issues contain the most repeated issue.
Dynatrace will trigger an alert when the problem severity increases.

Hoping the shared resources add value.

KR,

Peter.