Good afternoon!
During the course of testing alert deliver via webhook, I stumbled on some behavior relating to symptoms within the policy structure that I'm not sure are working as intended. In brief, I set up a simple symptom of "CPU core count < 10" and would trigger alerts by changing the value to be above my current host's core count. At one point I was having trouble with the alert triggering and was not seeing the symptom as active on my host object. To troubleshoot this, I created another symptom with the same metric/threshold and explicitly activated the symptom in my policy. Once I did this, I found that no matter what I changed the threshold to within the symptom definition, the threshold value for the symptom within the policy remained at the original value.
So, in short, my question is:
When I create a Symptom Definition and then set it to Activated within my policy without specifying an override of the threshold, should changes in the threshold within the Symptom Definition be reflected within the policy?
Thanks in advance!