Ntevl new alarm for same event id

[san mr]

Hello,

Good Day!

Currently for the same event ID alarms are getting suppressed. But we have the requirement from customer that it should generate new alarm for same event id even if it logs multiple times. For each event id even if it is same probe should generate new alarm it shouldn't suppress.  Kindly assist on how this can be achieved.

[Garin Walsh]

You are going to find this difficult to achieve as it is contrary to how UIM is designed to work.

But the approach here would be to use a preprocessing script to modify the alarm message and generate a unique suppression id for each of these messages that you want a unique alarm for. 

Better would be to share why your customer desires this behavior because likely they are failing to express a want accurately. In the past, for instance, I have been in receipt of this request and on getting into the detail of the issue, the customer's concern was that they wanted a periodic ping that the issue was ongoing and that they actually didn't care that there was a unique alert stored for each time time the problem was detected during a single event. They were just mixing their design of the solution into their request and therefore eliminating possible solutions of which they were not aware.