Why are my Event Rate Rule that uses Sequential Window not always working?

Document ID : KB000124203
Last Modified Date : 08/01/2019
Show Technical Document Details
Question:
Why are my Event Rate Rule that uses Sequential Window not always working? In some cases we get false Alarms from Event Type 0x22fffeb (A flapping secondary link has detected)
This Event will be generated if Event 0x22fffed occurs 3 times in 420 sec. ( default by CA ), but some Events 0x22fffeb will occur after only one 0x22fffed.
  
Environment:
Spectrum 10.2.3
 
Answer:
There is a problem with the calculation of Event Rate Rules that use Sequential Window.  As a possible workaround you can use the Sliding Window and this will work correctly.
This has been fixed in Spectrum 10.2.3 with Spectrum_10.02.03.PTF_10.2.364 which requires the 10.2.3_BMP_10.2.301 patch.  This has been fixed in Spectrum 10.3.0 under DE306829. 
Additional Information:
https://docops.ca.com/ca-spectrum/10-3-0/en/managing-network/event-configuration/working-with-event-rules/#WorkingwithEventRules-EventRateRules