Creating an AOM Alarm Grouping Rule

Constraints

• You can create a maximum of 100 grouping rules. If this number has been reached, delete unnecessary rules.
• Orchestration only applies to the alarms triggered by Prometheus and log monitoring-related alarm rules.

Procedure

1. Log in to the AOM 2.0 console.
2. In the navigation pane, choose Alarm Center > Alarm Noise Reduction.
3. On the Grouping tab page, click Create. On the displayed page, set basic information by referring to Table 1.

   Table 1 Basic information about a grouping rule

   Parameter	Description
   Rule Name	Name of a grouping rule. Enter a maximum of 100 characters and do not start or end with an underscore (_). Only letters, digits, and underscores are allowed.
   Enterprise Project	Enterprise project. If Enterprise Project is set to All on the global settings page, select an enterprise project from the drop-down list here. If you have already selected an enterprise project on the global settings page, this option will be grayed and cannot be changed. To select the newly created enterprise project during the creation of an alarm grouping rule, wait for about 10 minutes after the enterprise project is created.
   Description	Description of a grouping rule. Enter up to 1,024 characters.

4. Orchestrate the grouping rule. You can add grouping conditions, notification combinations, and end nodes.
   • Adding grouping conditions: Filter alarms based on the configured conditions. For the alarms that meet the grouping conditions, notifications will be sent based on the configured notification combination rules. For the alarms that do not meet the grouping conditions, check whether the subsequent grouping conditions or notification combination rules are met.
   • Adding notification combinations: Send notifications based on notification combination rules for the filtered alarms.
   • Adding an end node: End the rule orchestration.

5. (Optional) Click Add Grouping Condition to add a grouping condition for filtering alarms. For the alarms that meet the grouping condition, their notifications are combined for sending based on the configured notification combination rule.
   • Click . Then you can select And or Or to configure grouping conditions.
     • And: An alarm is triggered only when all conditions are met.
     • Or: An alarm is triggered when any condition is met.
   • Click to nest grouping conditions.
   • Click to set multiple grouping conditions.

     Table 2 Grouping condition parameters

     Parameter	Description	Example
     Alarm Severity	Severity of a metric or event alarm. Options: Critical, Major, Minor, and Warning.	Alarm Severity + Equals To + Critical
     Resource Type	Type of the resource selected when you create an alarm rule or configure custom alarm reporting. Options: include Service and Cluster.	Resource Type + Equals To + Cluster
     Alarm Source	Name of the service that triggers an alarm or event. Options: include AOM, LTS, and CCE.	Alarm Source + Equals To + AOM
     Tag	Alarm identification attribute. It consists of a tag name and tag value and can be customized.	Tag + resource_type + Equals To + AOM
     Notify When	Scenario when notifications are triggered. Option: Alarm triggered.	Notify When + Alarm triggered
     Alarm Rule's Enterprise Project	Enterprise project specified when the alarm rule is created. You can select the corresponding enterprise project.	Alarm Rule's Enterprise Project + Equals To + default
     Original Rule Name	Original alarm rule name configured during rule creation. Enter the original name of the alarm rule.	Original Rule Name + Equals To + AOMAlarm
     Annotation	Configured during alarm rule creation. It is an attribute that cannot be used to identify alarms. It consists of an annotation name and annotation value and can be customized.	Annotation + aom_monitor_level + Equals To + infrastructure
     First Triggered	Time range when an alarm is triggered for the first time. You can select Within Range or Out of Range for matching.	First Triggered + Within Range + 2025.04.08 15:26 — 2025.04.08 16:26
     -	Matching conditions: Exists: XX + Exists + AA. This means that the alarm whose XX contains AA is filtered. For example, Tag + Exists + AOM indicates that the alarm whose tag contains AOM is filtered. Not Exist: XX + Not Exist + AA. This means that the alarm whose XX does not contain AA is filtered. For example, Tag + Not Exist + AOM indicates that the alarm whose tag does not contain AOM is filtered. Matches Regular Expression: XX + Matches Regular Expression + Expression. This means that the alarm whose XX matches the specified regular expression is filtered. For example, Resource Type + Matches Regular Expression + host* indicates that the alarm whose resource type starts with host is filtered. Not Match Regular Expression: XX + Not Match Regular Expression + Expression. This means that the alarm whose XX does not match the specified regular expression is filtered. For example, Alarm Source + Not Match Regular Expression + LTS* indicates that the alarm whose alarm source does not start with LTS is filtered. Equals To, Not Equal To, Within Range, and Out of Range are not described in detail herein.	-

6. (Optional) Add notification combinations. Click Add Notification Combination to combine grouped alarms based on specified fields.

   Table 3 Combination rule parameters

   Parameter	Description
   Combine Notifications	Combines grouped alarms based on specified fields. Options: By alarm source: Combine the alarms from the same source. By alarm source + severity: Combine the alarms from the same source and of the same severity. By alarm source + all tags: The alarm source is the same. The alarm tags are the same as those specified in the grouping condition. The tags must have been used in the grouping condition to filter alarms. Intelligent combination: This function is available only in the CN North-Beijing4 and CN South-Guangzhou regions. By default, intelligent combination is disabled. After it is enabled, alarms can be intelligently combined if they meet any of the following conditions: Alarm Name: Alarms have the same or similar names. Alarm Message: Key characteristics are extracted from alarm messages for alarm clustering. All Tags: Alarms have the same tag value.
   Notification Rule	For the grouped alarms, notifications will be sent based on the notification rules you selected. If no notification rule is available, click Create. For details, see Creating an AOM Alarm Notification Rule. (For Rule Type, you can select Prometheus monitoring or Log monitoring. For Rule Settings, select Simple only.)
   Initial Wait Time	Interval for sending an alarm notification after alarms are combined for the first time. It is recommended that the time be set to seconds to prevent alarm storms. Value range: 0s to 10 minutes. Recommended: 15s.
   Batch Processing Interval	Waiting time for sending an alarm notification after the combined alarm data changes. It is recommended that the time be set to minutes. If you want to receive alarm notifications as soon as possible, set the time to seconds. The change here refers to a new alarm or an alarm status change. Value range: 5s to 30 minutes. Recommended: 60s.
   Repeat Interval	Waiting time for sending an alarm notification after the combined alarm data becomes duplicate. It is recommended that the time be set to hours. Duplication means that no new alarm is generated and no alarm status is changed while other attributes (such as titles and content) are changed. Value range: 0 minutes to 15 days. Recommended: 1 hour.

7. Click OK.

More Operations

After creating a grouping rule, perform the operations listed in Table 4 if needed.

Table 4 Related operations

Operation	Description
Checking a grouping rule	Click the name of a grouping rule in the rule list to view its details.
Modifying a grouping rule	Click Modify in the Operation column.
Deleting a grouping rule	To delete a single rule, click Delete in the Operation column in the row that contains the rule. To delete one or more rules, select them and click Delete above the rule list.
Searching for a grouping rule	Enter a rule name in the search box in the upper right corner and click . Grouping rules can be filtered by rule name, description, and enterprise project only in some regions.
Setting column display	Click in the upper right corner of the list. In the displayed dialog box, set column display. Basic settings Table Text Wrapping: This feature is enabled by default. If you enable this feature, excess text will move down to the next line; otherwise, the text will be truncated. Data Columns: You can select Freeze none, Freeze first, or Freeze first two. Operation Column: Select Freeze. Then the operation column will always be in the last column and visible. Custom Columns: Select or deselect the columns to display.