Disable Alerts from the GUI - BlueCat Infrastructure Assurance - 26.1.0

BlueCat LiveAssurance User Guide
ft:locale
en-US
Product name
BlueCat Infrastructure Assurance
Version
26.1.0
Attention: LiveAssurance Knowledge files should be modified only under guidance from BlueCat Customer Care. Therefore, if you want to disable alerts, contact BlueCat Customer Care before using the following procedure.
Note: Only Admin users can disable alerts from the Code tab.
In certain emergency scenarios (such as emergency maintenance or upgrades) or when an alert is either non-actionable or irrelevant to your environment, you might want to disable an alert temporarily and re-enable it as required. This action is different from the ability to supress or suspend alerting for a device, or disable the associated rule. While these existing options stop alerting, the associated .ind file is still loaded in the Collector component and will be executed on the device. The Disable option in the Code tab removes the associated .ind file from the Collector component, thereby preventing it from being executed on the device.

To disable an alert for a specific device, use the following procedure:
  1. Select the Code tab in the sidebar.
  2. Navigate to a vendor subdirectory (Path: ind/parsers/src) and select the device sub-directory that contains the rule (YAML file) associated with the alert you want to disable.
  3. Select Disable.
    Note: When you disable a rule in the YAML file, the file itself does not display its disabled status. However, this action is logged in the triton.disableind.log. When you select Disable again in the GUI for a previously-disabled rule, a message is displayed indicating that the rule is already disabled.
  4. After a rule is disabled, the indeni-knowledge-catalog service restarts automatically (the Collector does not restart). The Collector then loads the updated files, and stops executing the disabled .ind file.

The following image highlights the path to access an .ind file and the Disable button as displayed in the GUI.



How to re-enable an alert?

To re-enable a previously disabled alert, you must re-enable the associated rule. You can do this only by modifying the corresponding YAML file in the /overwrite directory manually. Contact BlueCat Customer Care for guidance.