Snooze feature
The snooze function prevents automatic actions from being repeated during a specified period, if and only if,
it is the same violation context and the action adds no further information to the violation, i.e., essentially noise.
For example, alerts of user A violating rule Y are snoozed as the alert adds no new context the user A's violation. App is used in this example, but the AutoAction can be defined for user, queues, etc.
An AutoAction specifying a Kill App or Move App action can not be snoozed.
Snooze is set the first time the app violates the rule.
The AutoAction itself continues to run uninterrupted whether zero or all apps currently covered by the AutoAction are snoozed.
The AutoAction takes action for any app not snoozing at the time of violation.
If an app is still violating upon awaking, the specified actions are performed and the app is snoozed once again.
See here for information on AutoAction's Limitations
Example
Rule/Action: if app uses memory > 1 GB send email
Two apps: A & B
Snooze time: 30 minutes
at 20:00
A > 1 GB → email is sent + snooze set (snoozed until 20:30).
B < 1 GB → app is not violating so nothing is done.
at 20:10
A > 1 GB → snoozing, no action is taken.
B > 1 GB → email is sent + snooze set (snoozed until 20:40).
at 20:20
A > 1 GB → snoozing, no action is taken.
B > 1 GB → snoozing, no action is taken.
at 20:30
A > 1G B → app wakes and is still in violation. An email is sent + snooze set (runs until 21.00).
>B > 1 GB → snoozing, no action is taken.
at 20:40
A > 1 GB → snoozing, no action is taken.
>B < 1 GB → app wakes. app not violating so nothing is done.
To change the snooze time
On Unravel Server, open
/usr/local/unravel/etc/unravel.properties.# sudo vi /usr/local/unravel/etc/unravel.properties
Search for com.unraveldata.auto.action.default.snooze.period.ms. Set the parameter to the new value and save the file. Here it is set to 2 hours.
com.unraveldata.auto.action.default.snooze.period.ms=7200000
Restart the JCS2 daemon.
# service unravel_jcs2 restart