Configure Deterministic Alert Clustering with Cookbook

Cookbook is a deterministic clustering algorithm in Moogsoft Enterprise that creates Situations defined by the relationships between alerts.

You can configure Cookbook to cluster alerts into Situations if they have specific characteristics such as temporal or topological proximity. Cookbook filters can include characteristics such as the following:

  • Class or type

  • Description

  • Server priority

  • Geographical location

  • Environment classification

Each Cookbook is a collection of Recipes: sets of configurable filters, triggers, and other calculations such as priority ordering and entropy threshold. A Cookbook can run multiple Recipes concurrently to process the incoming event stream and produce a variety of Situations. A Moogsoft Enterprise deployment may include multiple instances of Moogfarmd, each of which can run multiple Cookbooks.

Configure Cookbooks and Recipes

Learn More

To learn about how you can use macro language for Situation descriptions, see Situation Manager Labeler.

For a video tutorial on Situation Manager Labeler, see Customizing Situation Manager Labeler.