NetXMS Forum

Thanks Alex, super helpful.

Hi all,

We're monitoring log-based error events(Event Log Entry, Error in Log File, ASP .NET Error) and sending email notifications via an EPP rule. The issue we have is that when something goes wrong we can be spammed with hundreds of emails.

We have two different methods to resolve this but wanted input on which is better and if there are any other options.

1. A custom NXSL filter script on the EPP rule that builds a key and tracks via WritePersistentStorage(). This allows 10 emails per a rolling 600 second window per key (based on the message).
2. Generate an alarm with an alarmKey based on the message, using a custom script, and then using alarmTimeout and a companion rule that terminates the alarm. This is obviously a native solution but only allows 1 email per window.

Questions for the community:

• Is there a native mechanism we've overlooked for "max N notifications per time window"? (We've looked at action snoozeTime/blockingTimerKey, but those suppress rather than count.)
• For email throttling specifically, is the persistent-storage script the accepted pattern, or is there a cleaner way?
• Is the alarmTimeout → SYS_ALARM_TIMEOUT → terminate-rule chain the right way to get a self-resetting alarm?

Thanks in advance.

Hi,

I need some help in preventing e-mail alerts from being sent for specific entries in the Event Log:

In the events.xml file, I think we have it configured to only send out alerts if the entry is level 3 (warning):

But the one that I want to exclude are level 2 entries:

Am I going wrong somewhere?

TIA, Jim