Details
-
Improvement
-
Resolution: Fixed
-
Minor
-
None
-
None
-
v0.14.7.5628
Description
Alert Conditions allow for AND/OR logic via the "Require all conditions" and "Require any condition" toggle. However, Entity rules are AND only. Ideally, we would like to create one rule that can match on multiple Entity values. This could be limited to only matching on the same entity type if it's easier or makes more sense.
Example:
Check Conditions |
bgpPeerState ne established
|
bgpPeerAdminStatus eq start
|
Device Match |
*
|
Entity Match |
bgpPeerRemoteAs eq 100
|
bgpPeerRemoteAs eq 101
|
bgpPeerRemoteAs eq 102
|
or
Entity Match |
bgpPeerRemoteAs eq 100|101|102
|
In this particular example, the rule would match any BGP peer that is not established/start with a remote AS of 100, 101, or 102, generating an individual alert for each Entity match.