Transitions
Transitions are a user-configurable set of conditions that move an alert from one state to another within the Alert Rules Engine (ARE). Transitions result in the following:
-
Alerts move from one Moolet to the next Moolet in the chain.
-
Alerts pass to a clustering algorithm which clusters them into Situations.
To create and configure different transitions go to System Settings.
Create a New Transition
Click + to create a new transition and edit the fields to meet your requirements:
Field |
Input |
Description |
Name |
String |
Name of the transition. This can be up to 64 characters. Mandatory. |
Description |
String |
Description of the transition. |
Priority |
Integer |
Determines the priority of the transition if there are multiple transitions. The higher the value, the higher the priority. |
Active |
Boolean |
Sets the transition to active. |
First Match Only |
Boolean |
Transition only occurs once if an alert meets the trigger conditions. |
Trigger Filter |
Filter |
Filter that triggers the transition if an alert meets the defined trigger filter parameters. Mandatory. |
Inclusion Filter |
Filter |
Filter that passes additional alerts to the end state if they arrive after the initial trigger and meet the defined inclusion filter parameters. |
Start State |
- |
Determines the action state of the alerts in the inclusion filter. The start state and end state must be different. Mandatory. |
End State |
- |
Determines the action state of the alerts if they match the inclusion or trigger filters. The start state and end state must be different. Mandatory. |
When you have configured the transition, click Save to continue.
Delete a Transition
To delete a transition from the list of available transitions:
-
Select the transition to delete.
-
Click - to delete the transition.
-
Click Yes to confirm the deletion.