tau
tau copied to clipboard
No-event Type Actions / Engine
This Engine will track if no events of a given type have been seen for a while then create a new event which can then be alerted on.
An example use case this can solve is: no metrics / logs coming from a server and we are expecting data from the server. It could indicate problems with the server or device.
This engine will require a new type of action to track these events and the engine will need to run on time windows for the expected frequency +/- jitter of the event to determine if events are no longer being received from the source.