Disabled rule still fires alarm and sends email (4298336)

Two or more copies of the same rule is present in the FMS. The rule ID is listed in the rule condition tab. When this rule is duplicated, the rule ID is also duplicated to the copied rule. If one of these rules remains enabled, the rule (or copy of the rule) will fire.

Disable or delete the copies of the rule.

To determine the actual rule ID:

1. Run the following script in the Foglight Script Console (Administration | Tooling | Script Console) to obtain the rule ID for the copied rule.
   Double check if the rule name of 'copied_rule_name' is correct (it is case sensitive):
   
          server.RuleService.getAllRules().find{it.getName()==""}.getId()
   
2. Edit the copied rule in the Condition tab and replace the string that is highlighted in red with the ID that was obtained in Step 1 and save the changes
   
3. Click the 'Text' variable, then replace the string that is highlighted in red with the ID that was obtained in Step 1
4. Click the 'Add' button and save the changes
   
5. Go to the Rule Diagnostics dashboard and click Edit Rule to confirm that the rule ID has been changed successfully
6. Enable the copied rule and fire an alarm to confirm the email alert is fired only by the copied rule.