The documentation and examples are a little light on how to do alert filters and templates.
We have a set of critical applications that we are generating alerts on a dynamic threshold KPI using a supermetric. We have this working for our team. We would like to continue to send all alerts to one team, but a subset of alerts to other teams.
We have several other Alarm Groups (this is a custom tag) and would like to send emails to just the people responsible for those applications. We plan to use the same template for all the emails; we have previously tried using custom templates but could not get it to work.
This is a subset of what the emailFilter.xml file currently looks like:
<EmailFilter>
<Templates>
<Template alert_subtype="KPI_Breach" alert_type="Smart" status="New">New-Smart-KPI_Breach.html</Template>
</Templates>
<FilterRule name="vCopsKPINew">
<Conditions>
<condition type="Status">New</condition>
<condition type="AlertSubType">KPI_Breach</condition>
<condition type="AlertType">Smart</condition>
<condition type="Tag">Alarm Groups:AOP App Alarms</condition>
</Conditions>
<Addresses>
<sendTO delay="30" type="email">email@company.com</sendTO>
</Addresses>
</FilterRule>
</EmailFilter>
We think the additional filter rules should look like this:
<FilterRule name="vCopsKPINew_team1">
<Conditions>
<condition type="Status">New</condition>
<condition type="AlertSubType">KPI_Breach</condition>
<condition type="AlertType">Smart</condition>
<condition type="Tag">Alarm Groups:AOP Team1 Alarms</condition>
</Conditions>
<Addresses>
<sendTO delay="30" type="email">team1@company.com</sendTO>
</Addresses>
</FilterRule>
<FilterRule name="vCopsKPINew_team2">
<Conditions>
<condition type="Status">New</condition>
<condition type="AlertSubType">KPI_Breach</condition>
<condition type="AlertType">Smart</condition>
<condition type="Tag">Alarm Groups:AOP Team2 Alarms</condition>
</Conditions>
<Addresses>
<sendTO delay="30" type="email">team2@company.com</sendTO>
</Addresses>
</FilterRule>
Has anyone successfully configured multiple emails for the same alert? Does this look like it should work?
