VNA Alarm filter question

Products

• CA Virtual Network Assurance

Issue/Introduction

We have VNA 21.2.8 integrated with spectrum 21.2.8 and are using VNA for Viptela alarms sync.  I want one type of alarm not being send to spectrum so created the following filter:

{

  "ENGINE_ID": "engineid",

  "FILTER_TYPE": "blacklist",

  "NOTIFICATION_TYPE": "alarm",

  "CLEAR_HISTORICAL_ALARMS": true,

  "ACKNOWLEDGED": false,

  "SEVERITY": [

    "minor","warning","major","critical"

  ],

  "STATE": [

    "CREATED","MODIFIED","CLEARED","UNKNOWN"

  ],

 

When I create this filter, it acknowledged ALL VNA alarms, not only the filtered alarms. 

I assumed the filter entries were an AND, but it seems they use an OR operator. Can this be confirmed please?

Is the above filter correct for what I'm trying to do i.e. one alarm type that needs to be filtered?

Environment

Release : 21.2

Component : Virtual Network Assurance For CA Spectrum

Resolution

Since the engine is used as static string no filter applied -  "ENGINE_ID": "engineid".

For blacklist OR will be applied and and for whitelist AND will be applied.

The above config will filter any alarms with unknown severity or unknown state or name 
make sure you add correct severity and state specific to the alarm, otherwise filter will block all alarms of the given severity or state.

Also the below should be false, unless you would like to clear all existing alarms in VNA and spectrum
"CLEAR_HISTORICAL_ALARMS": true.