You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Justin Leet (JIRA)" <ji...@apache.org> on 2017/10/23 11:52:00 UTC
[jira] [Created] (METRON-1272) Hide child alerts from searches and
grouping if they belong to meta alerts
Justin Leet created METRON-1272:
-----------------------------------
Summary: Hide child alerts from searches and grouping if they belong to meta alerts
Key: METRON-1272
URL: https://issues.apache.org/jira/browse/METRON-1272
Project: Metron
Issue Type: Improvement
Reporter: Justin Leet
Assignee: Justin Leet
If an alert is already grouped into a meta alert, it's nice to route everything through the same query structure and allow sorting alongside them, etc. However, showing alerts that are already contained in a meta alert is potential clutter for a user and gives the impression an event has occurred twice if it's in a standalone alert and a metaalert.
This should hide alerts contained in a meta alert from searches (which will always match the enclosing meta alert anyway, so nothing will be lost from the search).
They should also be hidden from grouping calls, because the user has already manually grouped them during prior slicing and dicing.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)