The Application event log had was filled with put thousands of entries and Foglight picked these up and sent an email for each one.
The problem on the server was a lack of disk space and a sample email was:
The following alarms have been raised. Please use the provided URLs to obtain alarm details.
NT Event Log: Application Enterprise Vault Failed to access file 'T:\EVStorage\.xxxx.DVS'.
Reason: There is not enough space on the disk. [0x80070070]
Each email just differed on the .DVS number.
Is there a way to configure Foglight so that it doesn't send out quite so many emails for what is effectively the same fault?
The alert is related to the event log rule which is a default data driven rule:
1. In Administration -> Manage rules search for the EventLog rule
2. In ‘Behaviour ‘ Set the conditions for the alarm to fire, the options given helps to filter the amount of alerts received when an event triggers the rule.
3. choose the 3rd option as it will force the 2nd alert to be delayed for x minutes after the first alert has been sent.
4. Save the changes