Question & Answer
Question
Answer
When the same event occurs multiple times (the resource, classification, and condition fields are the same), then deduplication increments the event count of the current alert instance to show how many times the event occurred.
Hence, as explained in the documentation, when deduplication key is the same for two events, only the event count from the current alert instance is incremented. The other fields, for example, Severity and Summary are not updated with the latest data.
Currently, AIOps has the simple view that events are immutable in that the same events should always have the same Severity and Summary. In AI manager, deduplication is defined and controlled by a deduplication policy that runs as part of the lifecycle component. Currently, deduplication policies cannot be changed by a user. Hence, we cannot include new field, for example, Severity or Summary to deduplication to separate events with different Severity or Summary.
Product Synonym
AIOps
Was this topic helpful?
Document Information
Modified date:
08 June 2023
UID
ibm17001255