Forum Discussion
Steven_Su
May 23, 2022Copper Contributor
Alert grouping does not work
Hi team, We have an analytics rule that will run every hour. We have configured the alert grouping to "Grouping alerts into a single incident if all the entities match" for the 7-day time frame. ...
- May 25, 2022It will not work if the incidents are closed unless the switch to re-open a closed matched incident is enabled. I don't see any reason why it wouldn't have worked before you closed everything.
Steven_Su
May 24, 2022Copper Contributor
Hi,
Because the alert grouping did not work, I manually add the automation to close the ticket if the entity matches the condition.
If the alert grouping still works, then the column "Alerts" in my last screenshot will increase whenever a same alert is fired. But in my screenshot, it is not. So it really make me confused.
Because the alert grouping did not work, I manually add the automation to close the ticket if the entity matches the condition.
If the alert grouping still works, then the column "Alerts" in my last screenshot will increase whenever a same alert is fired. But in my screenshot, it is not. So it really make me confused.
GaryBushey
May 25, 2022Bronze Contributor
It will not work if the incidents are closed unless the switch to re-open a closed matched incident is enabled. I don't see any reason why it wouldn't have worked before you closed everything.
- burasathiAug 07, 2023Copper ContributorHello I have a same problem, the alerts are not grouped into incident even though there was matching entities .I don't have any automation to close the incidents. In my case one of the entities is the list of operation and the list also matches with order but still not grouping . If there is list in the entities can this prevent it from being grouped even though list is matching?
- Steven_SuMay 26, 2022Copper ContributorHi Gary,
Yes, you are correct. The function will not work if the ticket is already closed. We enable to re-opening to resolve the issue as recommended. Thanks.