If an alarm triggers in OneClick and if it is not acknowledged, there may be a need to escalate the alarm to the next level. The solution described here will help us to notify the Level 2 and Level 3 teams within an internal organization if an alarm was not taken care of for a certain duration.
Please follow the below steps in order to escalate the alarm to L 2 and L 3 teams if it has not been acknowledged for a certain duration
- There will be an acknowledged event generated whenever an alarm is acknowledged.
- This Acknowledged event is hidden by default.
- Enable the Acknowledged event using the below process.
The Acknowledged event is hidden from the Events tab by default. It is the 0x10707 (0x10703) event.
- Find and select the model.
- Click on the Events tab in the Component Detail panel.
- Click on the Filter icon.
- Click on the Event Type tab.
- Remove the 0x10703, 0x10705 and 0x10707 events from the list (All are the same).
- Click the OK button.
You should now see the Alarm Acknowledged events displayed in the Events tab when an alarm is Acknowledged.
- Now from the event configuration editor, filter the event that you want to escalate to the L2 and L3 teams. For example 0x10d35(Device not responding to poll).
- Now create a new event stating something like "Device not responding to poll alarm has not been Acknowledged" (0xffff1).
- Create one more new event called "Device not responding to poll alarm was still not Acknowledged (0xffff2).
- Now on the original event (0x10d35) create an event pair rule such that "if 0x10d35 occurs and if it is not followed by 0x00010703
(Acknowledged event) for 'T" seconds generate the new event created in step 5.
- Use SANM to escalate the new event to the L 2 team.
- Now go to the event created in step 5 and create an event pair rule such that "if 0xffff1 occurs and if it is not followed by 0x00010703
(Acknowledged event) for 'T" seconds generate the new event 0xffff2.
- Use SANM to escalate the 0xffff2 event to the L 3 team.