Alerting more than once for an open incident

[raj_vavveti]

Hi,

I want to get alerted/email notification more than once if a problem lasts for a long time. I heard in a webinar a while back that it is possible by setting up multiple alerting rules under same alerting profile. But it is not working. I only got the first alert and not the subsequent alerts.

When i chatted with with Support engineer, she informed me that it is not possible and i need to setup separate alerting profile for each timeframe. It will be very hard to maintain as i need to create integrations for each of these profiles. if it is not possible currently, it will be a good idea add this functionality. 

thanks

Raj

[Malaik · Accepted solution]

Hello Raj

I do it for example like this:

Warning alert: if the problem was opened since 15mn

Major alert: if the problem was opened since 20mn

Critical alert: if the problem was opened since 25mn

So I created different alerting profiles and different notifications (sent to different teams).

[ChadTurner]

Support is exactly right. You will need to create a set of Alert Profiles such as:

Level 1 alert: if the problem has been open for 15min

Level 2 alert: if the problem has been open for 30min

Level 3 alert: if the problem has been open for 45min

You could try and get away with that by putting in 3 sets of rules for each, but I've never tested it and from your post it sounds like it didn't work. You can have multiple Alert Profiles targeting one alert integration as well, and you can stream line it by using the API to mass create these

[paul_ingle · Accepted solution]

Specifically, say you want to alert if response time degradation (and other slowdown events) is:

1. Triggered at all

2. Happening for 15 minutes

You can specify 2 of the same severity rules in one alerting profile, the second severity rule having a 15 minute delay. So for this example, under 1 alerting profile, you would have 2 slowdown severity rules added - 1 with 0 delay, 1 with a 15 minute delay.

Thanks,

Paul

[raj_vavveti]

Paul,

Thanks for the reply. I tried that, but it doesn't work.

thanks

Raj

[Ashok_Selvaraj]

Hi,

Any suggestion/workaround without multiple alerting profile to trigger an notification everyday for open incident till it is resolved.

[Yosi_Neuman]

Hi @Ashok_Selvaraj 

Don't know of a way to do that with out creating extension that will pull all opened problem over 24 hours and post event to them that will trigger problem notification 

HTH

Yos 

[Esam_Eid]

if you have integration with any of the ITSM tools, you can ask them to configure escalation matrix.

if the alert is not acknowledged or resolved within specific time, it can change the severity of the incident.

Regards,
Esam