Alert Suppressions

The alert suppression feature of Kentik's alerting system is covered in the following topics:

• About Alert Suppressions
• Alert Suppressions Page
• Pattern Dialogs

Alert suppressions enable you to temporarily mute alarms (and thereby avoid notifications or mitigations) that would otherwise be triggered on traffic matching a given set of criteria. Alert Suppressions can be enabled in three ways:

• Alert Suppressions by policy: Use the Suppress Alerts switch on the General Policy Settings tab of the Edit Policy or Add Policy page to enable alert suppression for that policy and specify a date after which that suppression should end.
  Note: This option is not present in Up/Down Policy Settings.
• Alert Suppressions by pattern: The Alert Suppressions Page enables you to define patterns that, when matched in traffic that would otherwise trigger an alarm, instead causes the alarm to be muted. Each pattern has a specified expiration date, on which alerting will no longer be muted on the matching set of traffic. A pattern is similar to a key (a unique combination of values for a given set of dimensions; see About Keys), but a pattern may be set to use:
  - A partial condition(s) match (see Pattern Dialog UI).
  - An exact condition(s) match.
  - A policy match.
• Alert Suppressions by alert: On the Alerting page, you can silence for seven days any keys that match a specific alert:
  - On an alert in the Alerts List, click the vertical ellipsis button at the far right to open the drop-down menu, then click Suppress Alert.
  - On the Alert Details Drawer, under Take Action, click the Suppress Alert button.

Note: Patterns are independent of policies. A given pattern may match traffic covered by two or more policies.

The Alert Suppressions page is covered in the following topics:

• Alert Suppressions Page UI
• Pattern List

The Alert Suppressions page displays the Pattern List, which is a list of all alert suppression patterns that are currently defined in your organization. Patterns can be added, edited, and removed from this list. The work area of the Alert Suppressions page is made up of the following UI elements:

• Show: A button set with which you can choose which patterns to display in the list: all, active only, or expired only.
• Search Patterns: Enter text into this field to filter the list to those patterns containing that text in the Comment column.
• Add Suppression Pattern: A button at upper right that opens the Add Suppression Pattern dialog (see Pattern Dialogs), where you can configure and save a new pattern.
• Pattern List: A table that lists all the patterns in your organization (see Pattern List).

Notes:
- For information on configuring a pattern, see Pattern Dialogs.
- For information on configuring alert suppressions for an alert policy rather than a pattern, see General Policy Settings.

The Pattern List is a table that lists all the alert suppression patterns that exist in your organization. The list provides the following information and actions for each pattern:

• Pattern: The pattern's match type and conditions (dimension/value pairs) or policy as defined in the Add Pattern or Edit Pattern dialog (see Pattern Dialogs).
• Comment: The comment, if any, entered for the pattern when it was added or edited.
• Created: The date on which the pattern was added.
• Started/Starts In: The date on which the pattern started (if in the past) or starts in (if in the future)
• Expires: The date on which the pattern expires, meaning that alarms on matching traffic will no longer be muted.
• Edit (pencil icon): Opens the Edit Pattern dialog, where you can edit or remove the pattern.
• Remove (trash icon): Opens a confirming dialog that allows you to delete the pattern.

The dialogs used to specify pattern settings are covered in the following topics:

• Accessing Pattern Settings
• Pattern Dialog UI
• Pattern Dialog Settings

Patterns are defined in the pattern dialogs (Add Suppression Pattern or Edit Suppression Pattern):

• Add Pattern: To add a new pattern, open the dialog with the Add Suppression Pattern button at the upper right.
• Edit Pattern: To edit an existing pattern, click the Edit icon (pencil) in that pattern's row in the Pattern List.

The Add Suppression Pattern and Edit Suppression Pattern dialogs share the same layout and the following common UI elements:

• Close button: Click the X in the upper right corner to close the dialog. All elements will be restored to their values at the time the dialog was opened.
• Cancel button: Cancel the add pattern or edit pattern operation and exit the dialog. All elements will be restored to their values at the time the dialog was opened.
• Add Suppression Pattern button (Add Suppression Pattern dialog only): Save settings for the new pattern and exit the dialog.
• Save button (Edit Suppression Pattern dialog only): Save changes to pattern settings and exit the dialog.

The following settings are configured in the Add Suppression Pattern and Edit Suppression Pattern dialogs:

• Pattern Type: A drop-down menu from which to choose one of the following pattern types:
  - Match Conditions: The pattern is matched if all (exact match) or some (partial match) of the conditions listed in the Conditions section are matched.
• - Match NMS Conditions: The pattern is matched if all (exact match) or some (partial match) of the conditions listed in the NMS Conditions section are matched.
  - Match Policy: The pattern is matched if traffic matches the criteria of the selected policy.
• Suppression Window (appears when the Never Expire switch is off): A field that shows the period during which alarms on matching traffic will be muted. When clicked, the field expands into the Suppression Window Controls.
• Start Time (appears when the Never Expire switch is on): A field that shows date-time from which the pattern will be muted. Clicking the field opens a calendar in which you can set the date-time.
• Never Expire: A switch that, when on, removes the end of the silence window, thereby keeping the pattern active indefinitely.
• Comment: Any text that will make clear to others in your organization why the pattern was created. This text also allows you to filter the Patterns List later using the Search Patterns field.
• Conditions (appears when Match Conditions is selected): A list of the conditions that make up this pattern (see Pattern Conditions List).
• Add Condition: Button that appears either when Match Conditions is selected, or when Match NMS Conditions is selected and a measurement value is selected. Clicking the Add Condition button adds another row to the Conditions list.
• Policy (appears when Match Policy is selected): A drop-down menu from which to choose a policy for the pattern.

The following controls, which open by clicking the Suppression Window field, are available to set the suppression window:

• Start and End Date: Input fields that show the start and end date-times of the suppression window, which may be entered either using the calendar or directly in the datetime format YYYY-MM-DD HH:MM.
• Calendar: A popup in which you can click to set the start and end date-times.
• Apply: A button to set the suppression window to the date-times specified in the Start Date and End Date fields.
• Cancel: A button to leave the suppression window as it was before the controls were opened.

The Conditions list is a set of key/value pairs in which the key is a dimension. The Include statement for the conditions may be either of the following:

• Exact Match (default): The pattern is matched if all the conditions specified in the Conditions section are matched.
• Partial Match: The pattern is matched if any of the conditions specified in the Conditions section are matched.

Each row of the Conditions list is a condition whose operator is always "equals" and whose other characteristics are defined by the following settings:

When Match Conditions is selected on the Pattern Type drop-down:

• Dimension: Click on the listed dimension to open a popover menu from which you can choose a dimension. See Dimension Selection Groups for descriptions of the available options in this popover.
• Direction button: A button to the right of the dimension selector that appears only for dimensions that exist for both source and destination. The button toggles the perspective of the dimension between those directions.
• Value: The value of the dimension. Click on the field to see a drop-down list of options, when available. Filter the list by entering text in the Filter Options field at the top of the drop-down.
• Remove: Click the red X to remove the condition from the list.

When Match NMS Conditions is selected under the Pattern Type drop-down menu:

• Measurement: this field is shown by default and is not editable.
• Value: The value of the measurement to be matched for this condition. Click on the field to see a drop-down list of options.
• Remove: Click the red X to remove the condition from the list. This button is only visible when multiple NMS Conditions are on the list. To remove a lone condition without saving, either select another option from the Pattern Type drop-down menu or click the Cancel button.

Note: For each successive NMS Condition added to the list, the available options in the drop-down menu on the left will vary depending on the measurement value selected in the first (top-most) condition.