Graylog2 / Graylog2/graylog2-server

Allow separate notification grace periods for each individual “group by” attribute

Open
#14,082 0 comments 1 reaction 0 assignees View on GitHub
alerting feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

Initial discussion [here](https://community.graylog.org/t/grace-period-custom-fields-key-with-events/26686/2)

Use case:
I have a simple event that triggers an alert when any host generates over 2000 messages per hour. The aggregation is done on the host source name with a count.

I want to add a grace period to stop any one host spamming emails after triggering. But I still want to receive alerts from other hosts that trigger the event.

Currently the grace period applies to the entire event. Setting it disables alerts from all hosts. It would be great if grace periods could apply to each individual "group by" attribute.

(Issue experienced on Graylog 4.2.13-1 on Centos 7.9)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.