What should happen when a threshold with a time of day criteria has an open event and the period ends? And what happens if a similar threshold but for the following time period exists but with say the same criteria?
Like "EVT_TEXT CONTAINS "blah" and EVT_TIME > CurrentTime - 2 Minutes " for example?
If Off Event is enabled then this would trigger an open event which closes 2 minutes later.
Further info in this article:
I've attached 2 thresholds that covers events different time frames.
Threshold 1 covers events from 00:00 to 02:00
Threshold 2 covers events from 02:00 to 04:00
When an event triggered an on event at 01:59:30 and then it should trigger an off event at 02:00:30?
the Time of Day is applicable to ON event, so if an OFF event is triggered after the 00 - 02 window, it should just close the ticket.
Now if the same condition is true again, you should see a new alert generated by 02 - 04 condition.
What behavior are you seeing?
Having looked at the planning phase in session one of this series, we will turn our focus to the readiness phase. The all important technical capabilities assessment, ensuring the network, endpoints and users are adequately prepared for the move.
Hear first hand from IR's Global Head of Information Systems and Technology, Jason Schwendinger, on how he has been tackling these issues.Join webinar