Alert suppresion on rule

Michael 81 Reputation points
2021-10-08T07:49:13.22+00:00

Hi

I get spawned by alerts created by rule and need to use suppression but cant build expression. I use regex to trigger alert.

138819-image.png

138820-image.png

138861-image.png

Alert context:

![138823-image.png]4

What should expression be like in this field:

138777-image.png

Operations Manager
Operations Manager
A family of System Center products that provide infrastructure monitoring, help ensure the predictable performance and availability of vital applications, and offer comprehensive monitoring for datacenters and cloud, both private and public.
1,413 questions
Accepted answer
  1. System Center guy 686 Reputation points
    2021-10-15T14:00:03.167+00:00

    You may try to set the suppression expression of parameter1 to achieve your goal.
    In my testing, we use a rule (log file alert) to monitor the log file content.
    Setting as:
    Directory : c:\temp
    140830-pict002.jpg
    Pattern: temp.txt

    Expressions : Params/Param1 contains error
    140809-pict003.jpg

    suppression expression: Parameter 1

    140923-pict001.jpg

    As a result, the error count will increase by 1 when same error message occur in temp.txt file in same machine.
    140931-pict005.jpg
    140914-pict004.jpg

    Roger

    0 comments

5 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Michael 81 Reputation points
    2021-10-11T10:38:49.723+00:00

    Can anybody assist?

    0 comments
  2. CyrAz 5,181 Reputation points
    2021-10-12T07:24:04.797+00:00

    You don't say on what criteria you want the suppression to happen... Same server? Sale log file? Same error message?

  3. Michael 81 Reputation points
    2021-10-14T04:17:41.157+00:00

    Can anybody help?

    0 comments
  4. Michael 81 Reputation points
    2021-11-01T13:12:23.043+00:00

    Hello

    thank you @System Center guy . Everything works except for the suppression part. It spawn a lot of alarms. I tried with both Parameter 1 and logging computer but without luck.

    Any ideas?