Transitions

Transitions are a user-configurable set of conditions that move an alert from one state to another within the Alert Rules Engine (ARE). Transitions result in the following:

  • Alerts move from one Moolet to the next Moolet in the chain.

  • Alerts pass to a clustering algorithm which clusters them into Situations.

To create and configure different transitions go to System Settings.

Create a New Transition

Click + to create a new transition and edit the fields to meet your requirements:

Field

Input

Description

Name

String

Name of the transition. This can be up to 64 characters. Mandatory.

Description

String

Description of the transition.

Priority

Integer

Determines the priority of the transition if there are multiple transitions. The higher the value, the higher the priority.

Active

Boolean

Sets the transition to active.

First Match Only

Boolean

Transition only occurs once if an alert meets the trigger conditions.

Trigger Filter

Filter

Filter that triggers the transition if an alert meets the defined trigger filter parameters. Mandatory.

Inclusion Filter

Filter

Filter that passes additional alerts to the end state if they arrive after the initial trigger and meet the defined inclusion filter parameters.

Start State

-

Determines the action state of the alerts in the inclusion filter. The start state and end state must be different. Mandatory.

End State

-

Determines the action state of the alerts if they match the inclusion or trigger filters. The start state and end state must be different. Mandatory.

When you have configured the transition, click Save to continue.

Delete a Transition

To delete a transition from the list of available transitions:

  • Select the transition to delete.

  • Click - to delete the transition.

  • Click Yes to confirm the deletion.