Contributor IIICreate event in absence of "heartbeat" trap
We have a certain type of device that we are not allowed to do active SNMP monitoring, only traps. It sends us a heartbeat trap every minute as long as it is "up". Is there a way to make an event policy that alerts in the absence of an event? In this case, we would need to generate a critical event if the heartbeat hasn't been received for > 10 minutes. I currently have the heartbeat trap set as a "healthy" event policy. Apologies if there is some documentation about this topic that I have missed!
We have done this with an RBA. Setup an Automation policy, change policy type to 'Cleared events', then set the device and the healthy event. Align an 'Action' that inserts a new event into your API for the critical. Make sure the healthy event expires in 10 minutes. Then when the healthy event expires/becomes no longer active, the automation will trigger.
