-
Type:
Suggestion
-
Resolution: Unresolved
-
Component/s: Operations - Alerts, Operations - Policies & Maintenance
-
None
-
0
-
2
Issue Summary
Deduplicated alerts will raise the priority of an existing alert (as mentioned here).
In case an alert is deduplicated with a new alert of higher priority, the deduplicated alert’s priority is increased and its notification flow is restarted.
The issue is that a Deduplicated alert does not go through any Alert Policies (Team or Global) which is noted in the OpsGenie doc here, point 5:
However, if the alert is deduplicated, the original alert cannot be modified by the deduplicated alert through an alert policy, except for the alert’s priority.
The feature request here is to give some control to Admins on the priority increase behaviour, the reason for this is that some integrations will send multiple alerts and there is no way to directly control a priority increases via policy.
Customer Scenario
In this scenario, Icinga2 is creating multiple alerts at a level of P3, which this is lowered to P4 via Alert Policy, but it is later raised back to P3 due to a deduplicated follow-up alert.
Options
- Add an option to control deduplicate alert priority upgrades
- Allow deduplicates to be processed via Alert policies
Steps to Reproduce
- Create an Alert with a P4 (example)
- Create a new Alert with the same content (to trigger deduplication) but with a priority of P3
- The original alert will be upgraded to P3.
Workaround
No direct workaround is available as this is intended behaviour, the only option at present is to change the source and subsequent follow-up alerts to have the intended priority.