Delay alert warnings/emails by 1-2 seconds

[Nate2]

Is there a way to delay alert emails by a very short time?

In our scenario we have dual ISP connections on our routers for redundancy; one primary and one failover. The failovers have been amazing when one ISP goes down, it fails to the backup (users have no idea) and we immediately receive an email from our alerts and can take action.

The issue is when our primary connection goes down for a brief blip but comes right back. They seem to last less than a second so it's not an issue for users or us, but we then receive two quick emails; one for the primary going down followed by it coming back. It's great that they occur but it happens often enough that the emails are a little spam-y in our inbox and can even be slightly irritating during the weekend for whoever is on-call.

My question is this: is there a way to have an option for the alert/email only get sent when the primary has gone down for 1 or 2 full seconds rather than immediately? Ideally that will still save us the emails and concerns when it's those ultra brief blips but still send a correct email when it has gone fully down.

Thanks for any help!

[alemabrahao]

You cannot customize the frequency of alerts generated by the dashboard; in this case, you can use an external tool to monitor and customize it to your liking.

[alemabrahao]

Just one question, What is the configuration below?

[PhilipDAth]

What about using an email rule?

Something like when you get an email saying "up" delete all other emails saying "down".

Obviously, make the match criteria stronger.

[Nate2]

Here's our WAN appliance setting

I think the frequency isn't too much of a concern, because we receive the alerts as frequent as the uplink changes. I was more hoping that an alert along the lines of, "after the primary uplink status has been changed for more than 5 seconds" or similar, instead of it's current setting of 'immediately'

 

A rule could work but we have to start looking into the issue pretty much immediately after they come in so the second one that lets us know everything is fine and it was a blip is effectively the same as having previous emails deleted after it gets in.