IBM Support

In IBM AIOps 3.7.1, does the severity and summary of alerts updated in AI Manager when I received duplicated event?

Question & Answer


Question

In IBM AIOps 3.7.1, does the severity and summary of alerts updated in AI Manager when I received duplicated event?

Answer

The AIOps documentation provides following explanation:
Refer to the documentation:
When the same event occurs multiple times (the resource, classification, and condition fields are the same), then deduplication increments the event count of the current alert instance to show how many times the event occurred.

Hence, as explained in the documentation, when deduplication key is the same for two events, only the event count from the current alert instance is incremented. The other fields, for example, Severity and Summary are not updated with the latest data.

Currently, AIOps has the simple view that events are immutable in that the same events should always have the same Severity and Summary. In AI manager, deduplication is defined and controlled by a deduplication policy that runs as part of the lifecycle component. Currently, deduplication policies cannot be changed by a user. Hence, we cannot include new field, for example, Severity or Summary to deduplication to separate events with different Severity or Summary.

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSRS1M","label":"IBM Cloud Pak for Watson AIOps"},"ARM Category":[{"code":"a8m3p000000LRc5AAG","label":"Watson AIOps-\u003EAI Manager-\u003EIntegrations\/Connectors-\u003ECustom Connector"}],"ARM Case Number":"TS013135170","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.7.0"}]

Product Synonym

AIOps

Document Information

Modified date:
08 June 2023

UID

ibm17001255