Redwood Documentation

Product Documentation

 

›Escalation Routes

RunMyJobsAlerting

Triggering Alerts

  • Active Monitoring Module
  • Triggering Alerts
  • Process Alert Sources
  • Raising Alerts and Notifications from Processes
  • Process Server Alert Sources
  • Raising Alerts and Notifications from Process Servers
  • Ad Hoc Alert Sources
  • Using Ad Hoc Alert Sources
  • Monitor Alert Sources

Escalation Routes

  • Defining Escalation Routes

Email Alert Gateways

  • Email Alert Gateways
  • Creating and Configuring Email Alert Gateways

Alerting Routes

  • Visualizing Alerting Routes
← Monitor Alert SourcesEmail Alert Gateways →

Defining Escalation Routes

By default the only response to an alert operator message is Acknowledge. This can be changed on the alert source.

Alert operator messages are created by alert sources. Each alert source uses specific rules to determine:

  • when an alert needs to be raised
  • the escalation to use
  • the message to send
  • the valid replies

Alert escalations define where alerts are sent, and how long to wait for an acknowledgment before continuing to the next stage of the escalation.

Each alert escalation has the following fields:

  • Address - where the escalation message is to be sent.
  • Default Alert Escalation - the next escalation to use.
  • Delay amount and units - how long to wait for acknowledgment before the next escalation.

The message is sent to the specified address the moment the escalation is raised. If a default alert escalation is specified, then it will be raised after the delay specified on the current escalation.

note

When a condition specified in an alert source does not match an escalation, then no alert is sent.

warning

It is possible to create loops in escalation to repeatedly send messages. We recommend you add a delay of at least one minute between escalations to avoid overloading your mail server or clients.

Alert Escalation Actions

Alert escalation actions allow you to customize the way alerts are escalated.

The following predefined objects are available:

ObjectClassExample Code
jcsOutLogcom.redwood.scheduler.infrastructure.logging.api.LoggerjcsOutLog.info("This is an informational message");
jcsAlertEscalationPostAlertContextcom.redwood.scheduler.api.scripting.variables.AlertEscalationPostAlertActionScriptObjectjcsAlertEscalationPostAlertContext.isResend()
jcsSessioncom.redwood.scheduler.api.model.SchedulerSessionjcsSession.getQueueByName("PRD_Queue");
note

The jcsSession object is only available when you set an Action Subject.

Context-Menu

Alert escalations support the following context-menu actions:

ActionDescription
Edit SecurityEdit the security of the alert escalation
DuplicateMake a copy of the alert escalation to create a similar one
DeleteDelete the alert escalation
Export > ExportExport the alert escalation into a CAR file
Export > Export with related objectsExport the alert escalation into a CAR file including referenced objects
Promote > Promote to systemPromote the object to a remote system
Promote > Edit further then promoteEdit the export rule set prior to promoting
PromotePromote the alert escalation to another Redwood Server instance
EditEdit the alert escalation
Show PermalinksShow links that can be used from third party applications to link to the object
Add to navigation barAdd the current object to the navigation bar
New alert escalationCreate a new alert escalation
Show diagramDisplay the dependencies in a diagram
Filter > New FilterCreate a new alert escalation filter
Filter > Edit FilterEdit current alert escalation filter
Filter > DeleteDelete current alert escalation filter
Filter > Duplicate FilterCreate a copy of the filter
Filter > Export FilterExport the filter into a CAR file
Filter > Add to navigation barAdd the filter to a navigation bar
Filter > Create filter from searchCreate a filter from the current IntelliSearch query

Finding Alert Escalations

You can search for alert escalations using filters and the Search Alert Escalations box on the Alert Escalations tab. This box is known as the IntelliSearch box and located under your username on the top right-hand side of the user interface. Filters allow you to specify a list of objects with static criteria. IntelliSearch allows you to specify complex queries in a simple way using prefixes. Prefixes are used to specify which property you are searching in and have short as well as long syntaxes. For example, if you want to display all alert escalations with the term management in the comment, you would use the search criteria as follows:

c:management

You can search more than one property, as follows:

c:management n:corp
note

No spaces should be entered before or after the colon (: ).

See the Advanced Object Search for more information.

The following table illustrates the available prefixes for alert escalations:

PrefixesDescription
n, namesearches the name property
c, comm, commentsearches the documentation property
d, desc, descriptionsearches the description property
a, applicationsearches the application property
cb, changedbefore(internal) search for alert sources that changed before a certain ISO-8601 period
One day (24 hours):
P1D - in days
PT24H - in hours
PT1440M - in minutes
PT86400S - in seconds
PT23H60M - in hours + minutes
PT23H59M60S - in hours + minutes + seconds

One day and one hour:
P1DT1H - in days and hours
...

Deleting Alert Escalations

You can only delete alert escalations when no other objects relate to them. For example, if there are process alert sources that use the escalation, the escalation cannot be deleted until all process alert sources that use it have been modified. You can see all process alert sources that relate to the escalation in Related Objects in the lower detail pane and on the show page.

The table in related objects contains three columns:

  • Type - the type of object with a link to it
  • Related Object - the name of the object with a link to it
  • Used As - objects can sometimes be used in different roles

Security

PrivilegeDescription
AlertEscalation.CreateCreate alert escalations
AlertEscalation.DeleteDelete alert escalations
AlertEscalation.EditEdit alert escalations
AlertEscalation.ViewAccess alert escalations

You can grant privileges on two levels, Access and Admin; a privilege granted on Admin level allows the grantee to grant the privilege to other users. These privileges can be granted per partition or system-wide.

The Security tab allows you to specify which users can access, edit, and delete the alert escalation.

  • Granting and Revoking System Privileges
  • Granting or Revoking Object Privileges

Procedure

Create a simple alert escalation

  1. Navigate to "Alerting > Alert Escalations".
  2. Choose New Alert Escalation from the context-menu.
  3. Fill the Name field, the Address field, and Delay field.
  4. Choose Save & Close.

Example

Simple three stage escalation

  1. Navigate to "Alerting > Alert Escalations".
  2. Choose New Alert Escalation from the context-menu.
  3. Fill StageOne in the Name field, duty-operator@example.com into the Address field, and 15 into the Delay field, leave the Unit drop-down on Minutes.
  4. Repeat the previous two steps to create two more with the data below.
  5. Choose Save & Close.
  • Name - StageTwo
  • Address - backup-operator@company.com
  • Default - StageThree
  • Delay - 10 Minutes
  • Name - StageThree
  • Address - it-manager@company.com
  • Default - none
  • Delay - ignored

Three stage escalation with loop

  1. Navigate to "Alerting > Alert Escalations".
  2. Choose New Alert Escalation from the context-menu.
  3. Fill StageOne in the Name field, duty-operator@example.com into the Address field, and 15 into the Delay field, leave the Unit drop-down on Minutes.
  4. Repeat the previous two steps to create two more with the data below.
  5. Choose Save & Close.
  • Name - StageTwo
  • Address - backup-operator@company.com
  • Default - StageThree
  • Delay - 10 Minutes
  • Name - StageThree
  • Address - it-manager@company.com
  • Default - StageThree
  • Delay - 5 Minutes

Result

Procedure 1:

If an alert is raised at 20:00 and escalated to StageOne, the following will happen:

  • 20:00 - An email will be sent to duty-operator@company.com. If no response is received after 15 minutes, then it will be escalated to StageTwo.
  • 20:15 - An email will be sent to backup-operator@company.com. If no response is received after 10 minutes, then it will be escalated to StageThree.
  • 20:25 - An email will be sent to it-manager@company.com.

Procedure 2:

If an alert is raised at 20:00 and escalated to StageOne, the following will happen:

  • 20:00 - An email will be sent to duty-operator@company.com. If no response is received after 15 minutes, then it will be escalated to StageTwo.
  • 20:15 - An email will be sent to backup-operator@company.com. If no response is received after 10 minutes, then it will be escalated to StageThree.
  • 20:25 - An email will be sent to it-manager@company.com. If no response is received after 5 minutes, then it will be escalated to StageThree.
  • 20:30 - An email will be sent to it-manager@company.com. If no response is received after 5 minutes, then it will be escalated to StageThree.
  • Email will be continue to be sent to it-manager@company.com every 5 minutes until the operator message is acknowledged.
← Monitor Alert SourcesEmail Alert Gateways →
  • Alert Escalation Actions
  • Context-Menu
  • Finding Alert Escalations
  • Deleting Alert Escalations
    • Security
  • Procedure
  • Example
Docs
Getting StartedInstallationFinance InstallationConcepts
TroubleshootingArchiving
Learn and Connect
Support Portal
BlogEventsResources
ISO/ IEC 27001 Information Security Management
Automate to be human

2023 All Rights Reserved |

Terms of Service | Policies | Cookies | Glossary | Third-party Software | Contact | Copyright | Impressum |