Environment
Redline 3.5.1 build 1011 or higher
Situation
The purpose of this document is to provide a detailed overview of the Redline alert configurations. Specifically, this document is going to address the common questions associated with MultiFire, Alert Escalation, Back To Normal, and Self Correction Delay.
Resolution
The MultiFire Alert, Alert Escalation, Back to Normal Alert, and Self Correction Delay are features that can help administrators more effectively manage thresholds and recommendations in their system and minimize false alerts. These settings can be enabled on a global level or individual agent level. Let’s examine the following threshold/recommendation settings closer. MultiFire Alert: MultiFire is a configuration option on an alert. It provides a way for an administrator to be continuously reminded of a problem that does not get resolved. An alert using MultiFire will send out a notification (Email, Broadcast, SNMP, API) at a defined interval until the alert is solved. The MultiFire interval is set at the Control Center in the Configure | Analyzer page. The MultiFire interval is a global setting and applies to all MultiFire events. The interval cannot be set to a different length of time for each alert.
- For step-by-step instruction on how to set MultiFire alerts, click here.
- For step-by-step instruction on how to setup Alert Escalation, click here.
- For step-by-step instruction on how to set Back to Normal, click here.
- For step-by-step instruction on how to setup Self Correction Delay, click here.
Below is a graph to help visualize what actions will be taken when each of these options are enabled. They may be combined together with one rule; Alert Escalation must always run with MultiFire. MultiFire does not require Alerts Escalation however. Each of these options are contingent upon the alert itself being enabled.
Additional Information
This article was originally published in the GWAVA knowledgebase as article ID 2024.