Minimizing false positive monitoring alerts

andreas-doehler
Sun, 07 Jan 2024 09:23:32 +0000

Dhananjay:

When the monitored system is up and working correctly, we receive notifications that it is down and then back up again.

Then you have some type of network problem. The down and up message only depends on ICMP echo requests.

Dhananjay:

We would appreciate guidance on how to adjust the monitoring system’s notifications to avoid being overwhelmed with irrelevant alerts

For the notification you should consider the time you want before you get the first notification. If you say that you want the first notification only after 3 minutes down, you can configure a rule like “Delay host notifications”.
Another option to get the same result is the rule “Maximum number of check attempts for host”.