I have recently expanded the scope of our SAM installation and started to use to provide email alerts to other teams within our organisation. The first of these is our "Mobile Team", these guys are responsible for local servers out on remote sites. I have added the nodes to SAM and these are polling as expected, I have also added a 'Node' custom property called 'operational owner' to identify which servers this team shoud receive alerts for.
Based on the above information, to send the Mobile team alerts when hardware components are failing, i copied the standard hardware alert which we currently use and added an AND statement so that they would only receive alerts when one of their servers were affected (see attachment). The issue i am now having is that this is being treated as an OR statement meaning the Mobile team are now receiving alerts for any event on every server that has the operational owner set as "Mobile Team".
Can anyone point out the error in my alert syntax? I did find this much easier to read in the old Alert Manager utility on the poller but since 6.2 that is no longer available (see my other post for more information)
I hope this makes sense and hope anyone can help.