Interactive Corrective Actions

Field Description

Field Name

Execution Type. Specifies when the action should be executed. Available options are:

• Rise. Execute each time an alert instance is created.

• Activation. Execute upon alert trigger activation for a certain context. Very similar to Rise, except for that activation will not happen for event triggers that have no correlated events.

• Deactivation. Execute upon alert trigger deactivation for a certain context.

• Escalation. Execute once the alert is escalated.

• Deescalation. Execute once the alert is de-escalated.

• Acknowledgment. Execute once any alert instance (instance of an alert event) is acknowledged.

executionType

Corrective actions initiated upon Acknowledgment will only run if one of the pending instances was acknowledged.

Context Mask. Action will be executed from every context matching this mask.

mask

Action. Name of the action to be executed.

action

Parameters. Action-specific execution parameters.

input

Run From Source Context. If this flag is checked, corrective action will be launched from the context that the alert came from.

The Context Mask parameter is ignored if Run From Source Context is on. However, it's necessary to select a Context Mask that will match one or all possible alert source contexts first, since this will allow proper selection of an Action and its Parameters.

runFromSource

Example: If an alert monitors memory usage of an application that has memory leaks, selecting Restart corrective action and enabling Run From Source Context will restart the application on the server that has originated the alert. Same applications on other servers will not be touched.