Alerting Profile - Filter Problems based on service name

[Theodore_x86]

Hello!

It might seen easy but I am stack so any help would be much appreciated.

I want to create an alerting profile which DOES NOT include problems that have the two following characteristics:

i.  "RESPONSE TIME DEGRADATION" type problems 

ii. for services that contain some string into the service name.

BR

[AntonPineiro]

Hi,

I would add a tag with those Service entities which NOT contains that string, using some autotagging rule.

Alerting profile will have:

• Limit scope base on before tagging rule.
• Negate event filter base on "RESPONSE TIME DEGRADATION".

Best regards

[Theodore_x86]

Hello @AntonPineiro .

Yes that would work, but I prefer using tagging for the services in scope and not a tagging rule for all other services. 

BR

[AntonPineiro]

Hi,

Yes, you are tagging services in scope, but those services are those which does not contains that string.

Best regards

[mgome]

If you negate multiple filters in the filter section of an Alerting Profile it will AND the filters.  Select the predefined filter for "Response time degradation" and add a description custom filter which uses contains service name.

[Theodore_x86]

Hello @mgome 

Unfortunately, the service name is not mentioned on the Description field nor the Title field....

[mgome]

You could also try a custom property filter on the "dt.entity.service.name" property.

[Theodore_x86]

Hi @mgome.

It only accepts event filters(dt.event....), not entity filters.

BR

[AntonPineiro]

Hi,

Tags filter + event filter negation. I do not see another way.

Best regards

[Theodore_x86]

Me too, but it is a pretty normal and expected use case not to have a profound/simple solution.

Maybe I will raise a new Idea here...

Thanks for the assistnace @AntonPineiro .

BR