events correlation - multiple alerts into single alert

Discussion created by sonya.patel on Aug 5, 2009
Latest reply on Aug 11, 2009 by keith_k

Configuration - 3 different URL checks in the url_reponse probe.

Alert when all three url checks fail.

We are aware that a preprocessing filter should be setup to make the single alarms invisible or excluded from the queue.  What is the best practice to alert when all 3 url checks fail?  SQL query?