In a tenant, new policies can be created to notify on alarms when the alarm message contains or not a certain string. However, the filters were not always working.
For example, a customer wanted to have an email sent for any critical APM alarm in DX-OI that does not contain the word "summary" anywhere in the alarm message.
The policy created used these filters :
However, emails with this subject were received:
The alert Summary_Bus_servlet has breached the CRITICAL threshold
Release : SAAS and OnPrem
The search used in the policy filters are case-sensitive and some rules apply.
When adding filters to policies in DX SaaS to manage alerts and notifications, it is required to consider that Message is case-sensitive.
The list of rules in search are summarized in this table:
For SaaS
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/dx-operational-intelligence-saas/SaaS/using/alarm-analytics/All-Alarms.html
For OnPrem
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/digital-operational-intelligence/20-2/using/alarm-analytics/All-Alarms.html