Group includes items a Rule should exclude in Performance Management.
Events are being raised for interfaces that should not raise Events. The Event Rule is in a Threshold Profile associated to a Group where the Rules are configured to exclude the interfaces raising Events.
The Events are accurate but the interfaces are not ones that need to be monitored for Event raise.
A Group was created with the "Include the children of managed items" option enabled. Then Devices were added as Direct members. A Rule was then created to exclude target interfaces, in this case Tunnel interfaces. In that situation the target items will still be members of the Group, somewhat 'virtual' members through inhertance, rather than 'real' members via direct addition. When that Group is associated to the Threshold Profile Events are raised against the items since only directly added items are excluded from Group membership via Group Rules.
To validate the cause, we should see the items set for exclusion via Rule as Group members only when listing Inherited items in the Items tab for the Group. They should not also appear when listing only Direct items. They would appear if using the "Direct and Inherited" option.
All supported Performance Management releases
With the Group already configured in this way we can resolve this by: