cancel
Showing results for
Show  only  | Search instead for
Did you mean:

## Threshold: warning or Severe

Inactive

Hi,

I am looking to have an incident created for warning and severe on the same incident.

Upper Warning should be 80%

Upper Severe should be 90%

while creating incident under threshold tab have selected threshold as : "Warning Or Sever" aggregation : "Avg" and provided threshold for both upper warning and severe as mentioned above. But it seems it is alarming only for warning not for severe even the utilization crossed 100%.

Regards,
Suraj Gupta

3 REPLIES 3

Hello Suraj,

warning or severe: A warning triggers when the warning threshold is exceeded. No additional incident occurs if the severe threshold is exceeded.

If you want an incident to be thrown if a severe condition occurs after a warning condition, you need to define a separate incident rule with the severe threshold.

Regards,

Babar

Inactive

Hi Babar,

Thanks for the clarification, my assumption was right. what should be the right logic? OR?

Regards,
Suraj Gupta

Hello Suraj,

The logical operator to combine multiple conditions: and, or. You can select an operator only if two or more measures are listed.

Multiple conditions can be concatenated logically. When the condition is evaluated, no operator precedence (`AND` stronger than `OR`) is applied:

• If the first `FALSE` condition is followed by an `AND` concatenation, then the complete expression evaluates to `FALSE`.
• If the first `FALSE` condition occurs after an `AND` concatenation, then the complete expression evaluates to `FALSE`.
• If the first `TRUE` condition is followed by an `OR` concatenation, then the complete expression evaluates to `TRUE`.

For example:

• `true AND false OR true` — evaluates to false
• `true OR false AND true` — evaluates to true
• `true OR false AND false` — evaluates to true
• `false AND true` — evaluates to false

If measures are combined with `AND`, their splittings have to match. If the first condition is violated by a measurement from an Agent, and the second condition is violated by a measurement from a different Agent, the combination will not be seen as violating.

Just read the below documentation for more insight.