We are monitoring network equipment and have 4 tunnels running over the same physical interface. If there is a break in the connectivity at the carrier end that DOES NOT affect the local physical interface, all tunnels will fail. This is an indication that the WAN circuit has failed. PD sends 4 alerts for 4 tunnels with the same description EXCEPT the beginning which will be unique:
- Tunnel1 circuit1
- Tunnel2 circuit1
- Tunnel3 circuit1
- Tunnel4 circuit1
We have over 1000 of these circuits with 4 tunnels over each so doing this manually for each circuit would be a non starter. My thought was that I could use a regex as a de-duplication key to get rid of the first word using ^\S+\s+(.*) and replace it with {{1}}.Â
This way the above 4 alerts would all become “circuit1” for de-dup and the additional alerts would be suppressed.
I can’t figure out where I would do this. Is this something that I would need AiOps for? Since we only monitor routers and switches, I can’t figure out what else I would use AiOps for so I did not want to jump in unless it was the only way.