Multi-severity Rule keeps triggering unexpected email alerts hourly even when Condition have not changed. (4262452)

Alerts are being triggered every hour, even though there has been no change in state. A multi-severity alarm is being triggered hourly for the same condition.

The rule behavior remains unchanged. Only one alarm or alert is allowed per topology object at a time. To maintain this, an alarm query is executed to check for current alarms. However, if there is a large volume of alarms, it can affect the performance of dashboards that query alarms. Foglight is designed to manage up to 10,000 alarms. When the rule runs a query to check for the most recent alarm, it retrieves the top 10,000 alarms. If the total number of alarms exceeds this limit, it may prevent the query from detecting an existing alarm for the current topology, leading to redundant alerts.

Effective alarm management may be needed to reduce the number of alarms in the Foglight repository and resolve this issue.

Refer to the following KB Articles for further details:

• Get a count of the total number of Alarms
• How to Purge Alarms? How to schedule purging of Alarms?