Configure Deterministic Alert Clustering with Cookbook

Cookbook is a deterministic clustering algorithm in Moogsoft Onprem that creates Situations defined by the relationships between alerts.

You can configure Cookbook to cluster alerts into Situations if they have specific characteristics such as temporal or topological proximity. Cookbook filters can include characteristics such as the following:

Each Cookbook is a collection of Recipes: sets of configurable filters, triggers, and other calculations such as priority ordering and entropy threshold. A Cookbook can run multiple Recipes concurrently to process the incoming event stream and produce a variety of Situations. A Moogsoft Onprem deployment may include multiple instances of Moogfarmd, each of which can run multiple Cookbooks.