Grouping Rules

AOM supports alarm grouping. You can filter alarm subsets and then group them based on the grouping conditions. Alarms in the same group are aggregated to trigger one notification.

As shown in Figure 1, when the routing condition is set to clusterName: clusteraom, the system filters alarm subsets whose clusterName is clusteraom. Then, the system groups the alarm subsets based on the grouping condition, and combines the grouped alarms based on the initial wait time, batch processing interval, and repeat interval. Then the combined alarms can be associated with action policies to trigger alarm notifications.

Figure 1 Alarm grouping process

Creating a Grouping Rule

  1. In the navigation pane, choose Alarm Center > Alarm Noise Reduction. Then, choose Grouping Rules.
  2. Click Create and set parameters such as Rule Name, Inherited Rule, and Routing Condition. For details, see Table 1.

    Figure 2 Creating a grouping rule
    Table 1 Grouping rule parameters

    Parameter

    Description

    Example

    Rule Name

    Rule name, which can contain up to 100 characters and cannot start or end with an underscore (_). Only letters, digits, and underscores are allowed.

    ruleName

    Inherited Rule

    A grouping rule can inherit the routing and grouping conditions of a notification rule.

    AOM built-in grouping rule is a root rule, with no routing or grouping condition being set. If you do not want to inherit any rule, select this option.

    AOM built-in root grouping rule

    Routing Condition

    The system will filter the alarms that meet the routing condition.

    If the routing condition is set to event_severity:Critical, alarms whose event_severity is Critical will be filtered.

    event_severity:Critical,event_type:alarm

    Grouping Condition

    The system will group alarms based on specified fields. Alarms in the same group are aggregated for sending one notification. The grouping condition can be an existing or a custom alarm field.

    event_severity, event_type

    Description

    Description of a grouping rule.

    -

    Initial Wait Time

    Time for a newly created or modified rule to take effect. The value ranges from 0s to 10 minutes. The recommended value is 15s.

    Batch Processing Interval

    Period in which alarms will be combined for batch processing. The batch processing interval cannot be shorter than the initial wait time. The value ranges from 5s to 30 minutes. The recommended value is 60s.

    If this parameter is set to 1 minute, a batch of alarms and events are processed each minute.

    Repeat Interval

    Period in which duplicate alarms will be sent only once.

    The value ranges from 1 minute to 15 days. The recommended value is 1 hour.

    If this parameter is set to 1 hour and the alarm or event is not cleared within 1 hour, the notification will be sent again.

    Action Policy

    An action policy is related to the SMN message to be sent and custom template. For details, see Alarm Action Policies.

    -

  3. Click OK.

More Operations

After creating a grouping rule, perform the operations listed in Table 2 if needed.

Table 2 Related operations

Operation

Description

Editing a grouping rule

Click Modify in the Operation column.

Delete a grouping rule

  • To delete a single rule, click Delete in the Operation column in the row that contains the rule, and then click Yes on the displayed page.
  • To delete one or more rules, select them, click Delete above the rule list, and then click Yes on the displayed page.

Searching for a grouping rule

Enter a rule name in the search box in the upper right corner and click .