Optimizing Dependent Alert Mapping Performance

Optimize Dependent Alert Mapping for enhanced performance with large resource additions.

1. Add PropertySource to assign ERI’s to collectors by completing the following steps:
   a. Download the addERI_collectorMapping.json.
   b. To import the files, navigate to Settings > LogicModules > Add.
   c. Select Import from Files and select Browse.
   d. Select Save.
   e. Select the imported PropertySource and select Edit.
   f. In the AppliesTo section, enter system.collector == "true".
   g. Select Test AppliesTo to view the number of resources connected to the collector.
   h. Select Save.

2. Add TopologySource to create connections between entry point seeds and their collectors automatically by completing the following steps:
   a. Download the collector_to_entrypoint_toposource.json.
   b. To import the files, navigate to Settings > LogicModules > Add.
   c. Select Import from Files and select Browse.
   d. Select Save.
   e. Select the imported TopologySource and select Edit.
   f. In the AppliesTo section, enter join(system.groups,",") =~ "Entry point resource group".
   g. Select Test AppliesTo to view the number of resources connected to the collector.
   h. Select Save.

3. Create collector’s dynamic groups by navigating to ResourceTree > Add > Dynamic group.
   For example, you have created a dynamic group as Entry_Point_Collectors, which contains collectors like collector1 collector2, …and so on.
4. Select Manage to delete or update the Dependent Alert Mapping rule by navigating to Settings > Enabling Dependent Alert Mapping.
5. Select the required Dependent Alert Mapping resources or group (for example: entry point collector) and verify the settings for the entry points.
6. Select Save.
   You can monitor the Dependent Monitor Mapping using audit logs.

Dependent Alert Mapping Flowchart