Skip to main content

Concept explainer: Overlapping maintenance windows in APEX AIOps Incident Management

This video explains the concept of overlapping maintenance windows in APEX AIOps Incident Management.

*Please note Moogsoft is now part of Dell's IT Operations solution called APEX AIOps, and changed its name to APEX AIOps Incident Management. The UI in this video may differ slightly but the content covered is still relevant.

The behavior of alerts is a bit tricky when you have multiple, active maintenance windows. Let’s walk through a few examples together.

1_Overlapping_Maintenance_Windows.jpg
2_Overlapping_Maintenance_Windows.jpg

An event arrives, and it becomes an alert. At this point, the in maintenance field value is false.

3_Overlapping_Maintenance_Windows.jpg

Then the alert enters the maintenance window time period, and at this point the “in maintenance” value is still false.

4_Overlapping_Maintenance_Windows.jpg

Now, a new event arrives and is added to the alert during the maintenance time window. This turns the in maintenance value to be true.

5_Overlapping_Maintenance_Windows.jpg

When the alert exits the window, understandably, the in maintenance value turns back to false.

6_Overlapping_Maintenance_Windows.jpg
7_Overlapping_Maintenance_Windows.jpg

What if there’s an overlapping period? Let’s say there are two maintenance windows, and this alert matches the criteria of both.

8_Overlapping_Maintenance_Windows.jpg

In this case, there’s no way to predict which window this alert would be part of. It could go into window 1 or window 2, but it will never be part of both windows.

Once it’s placed in one window, it works the same way as the first example.

9_Overlapping_Maintenance_Windows.jpg
10_Overlapping_Maintenance_Windows.jpg

11_Overlapping_Maintenance_Windows.jpg

Let’s say you got an alert that qualifies for both windows, and Incident Management placed it in window 1.

12_Overlapping_Maintenance_Windows.jpg

After the maintenance window expires, Incident Management puts this alert into the other maintenance window that’s still active. And unlike other cases, the in maintenance value stays true.

13_Overlapping_Maintenance_Windows.jpg
14_Overlapping_Maintenance_Windows.jpg

Finally, what if an alert is within the first window's time range, but no new event arrived during that window to flip the in maintenance field value to true?

15_Overlapping_Maintenance_Windows.jpg

It stays outside through the time periods of the maintenance windows.

16_Overlapping_Maintenance_Windows.jpg

Now you know how the alerts behave with multiple maintenance windows. Thanks for watching!