Trueonly if all the conditions evaluate to
past: This parameter contains the JSON payload of the previous incident which the current event is compared with +
current: This parameter contains the JSON payload of the incoming event which will be compared with the past incidents’ JSON payload +
event_count: This denotes the number of deduplicated events for a given incident
jsonPath(<the JSON string that should be parsed for JSON content>, <"the parameter that needs to be picked from the parsed JSON object">)
AlarmNamefrom the Message object in the payload, based on which, you can de-duplicate incidents.
metricmatches the regular expression
metricare the same
hostare the same
valueis less than 60%
contextvalue tag is same
Resolvedstate. Squadcast triggers a fresh incident for such an alert and notifies the right people.
Golangflavour as shown in the screenshot below and then, set them up in Squadcast:
Downthe list of rules.