We have recently had a few situations where our NOC was flooded with several hundred application alerts. Because of the large number of alerts they were unable to quickly acknowledge/manage those alerts. They expressed an overall degraded experience at the time of those large number of alerts. During those flood of alerts the view they were using was a filtered All Alerts view (not the global All Alerts resource)
(Filtered non global resource below)
(Global Resource not utilized
I am hoping and assuming that the global Alert resource is better suited in dealing with larger number of alerts where the NOC will not experience the sluggishness that previously occurred.
If your wondering why we use the non global alert resource, its because we have a subset of devices that the NOC actively manages, those devices and their alerts are filtered through view customization
If I do go the route of the global alert resource I will need to change are existing alerts using the "Team" custom property that is natively existing on the Global All Alert resource. Otherwise the NOC will be seeing alerts on devices they are not responsible for.
Has anyone else had issues with alert administration when not using the global resource ? Has anyone experienced issues when using the "Team" filter associated with the All Alerts global resource ? Looking forward to your responses, thank you.