praeco icon indicating copy to clipboard operation
praeco copied to clipboard

Published 20 hours ago • verified publisher icon johnsusek

Praeco is sending too many emails for each alert once it is triggered

Open suresh447 opened this issue 4 years ago • 4 comments

Hi All,

I am facing issue like praeco server is sending too many emails once the alert is triggered.

Please find the alert condition which i setup in the server

WHEN countOVER all documentsWITH FILTER log:error AND kubernetes.namespace_name:intelligenttraveller AND stream:stdoutIS ABOVE 1 FOR THE LAST 5 minutes WITH OPTIONS

Aggregation

Instead of sending alerts immediately, send a report of alerts on a schedule. Schedule Every 30th minute past every hour Schedule is in the server's time zone. Summary table kubernetes.pod_name kubernetes.namespace_name log stream Include a summary table of these fields in alert.

For this alert i received 700+ emails.

suresh447 avatar Feb 28 '20 15:02 suresh447

Which did you select on Include? image

Aggregation summary only summarize the alert. (Result of previous version. Latest version not yet tested... Please let me know how it works.)

daichi703n avatar Feb 28 '20 17:02 daichi703n

@daichi703n Now its fine i got only one alert with Aggregation summary only option in include option.

suresh447 avatar Mar 02 '20 12:03 suresh447

👍

daichi703n avatar Mar 02 '20 13:03 daichi703n

I will have to update the UI to only allow aggregation summary type of "Include" when aggregation is enabled..

johnsusek avatar Jun 13 '20 22:06 johnsusek