Alert count behavior in Opsgenie not clear

[serge calderara]

Dear all,

There is some clarification that I try to get on the way opgenie handle alerts.

What I have unserstand is that the unicity of the Alert is handle through the Alias Field.

In our case we map the Alias field to the ProblemID of Dynatrace integration. With that an alert can be automatically closed when a close state message is received from Opsgenie.

Now what is not clear is how Opgenie will handle the count value ?

As an alert is supposed to be unique from the Alias field, how a new alert can be detected as same as an existing open alert in order that opsgenie increse the count value ?

if a new alert is coming, the alias field will be natively different, does it take in account as well the title ?

Thanks for clarification

regards

[Samir]

Hi @serge calderara 

Alerts de-duplicate based on the alias field as well. so if an alert is created through an integration, and has the same alias field value as an open alert, it will de-duplicate the alert.

As far as what will make it de-duplicate vs close the alert, that depends on if it matches the "Create Alert" action of an integration, or the "Close Alert" action.

If it matches the "Create Alert" action filter, and has the same alias as an open alert, it will de-duplicate. If it does not match the "Create Alert" action filter, but does match the "Close Alert" action filter, then it will close the alert instead of de-duplicating it.

Hope that makes sense.

Thanks,

Samir