Hi folks,
My teams manage a number of Airwave appliances and one complaint I seem to regularly get is that Airwave seems to spit out UP alarms even though we never got a DOWN alarm for the same node.
On investigation, it would seem that this was due to our thresholding.
Our tresholding is loose, on purpose, so as to not get down alarms for quick downs. We have other methods to deal with these flaps in a more holistic manner.
So the idea is that, when we get a DOWN alarm, it's a real hard down and we are taking specific action.
It would seem, however, that there is no flexibility on the UP alarms. Meaning, as soon as Airwave sees a device as UP, it will send us the up alarm.
This is frustrating my team, as they will get these UPs for devices that they never got DOWNs for.
As such, I was thinking perhaps it would be useful to introduce some logic in to the UP alarm function.
Something like "Send up alarm for this node only if the previous alarm sent for this node was as down alarm"
That way, Airwave is not sending you UPs for Downs you never cared about being alarmed on.
Thoughts, anyone?