Active Instances

Each of alert's triggers (both variable-based and event-based) can be active:

  • An event trigger is active is primary event has occurred but correlated event has not

  • A variable trigger is active if activation condition is true (and hysteresis time elapsed) but deactivation condition is false (or deactivation hysteresis time not yet elapsed)

  • A variable trigger is also active if it's in "Flapping Detected" state

Since trigger's context masks can be used to check multiple contexts, the trigger may be active for more than one context simultaneously.

An alert instance is called Active if its trigger is still active for this alert's source context.

It's important to distinguish Active and Pending alert instances.

Viewing Active Instances

To see active instances of a certain alert, launch the View Status action and check the Active Instances table.

To see all active alerts in the system, run the Active Alerts query.

This is what a list of active alerts looks like in the user interface:

Was this page helpful?